Jun 23 2021 02:02 PM
We're currently using a file path watchlist (csv file where each item is a path name, ex C:\sys\svchost), and the match using !in~ against the watchlist is failing. If we take a single item from the watchlist and compare by putting @ in front (ex. @'C:\sys\svchost') the match works as expected.
Is there a way the @ literal can be applied to all items in a watchlist when using the !in operator?
We are using the @ symbol as described in the docs here:
https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/scalar-data-types/string
Jun 23 2021 02:15 PM
Jun 23 2021 02:20 PM
Jun 23 2021 02:41 PM