Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Joining with wildcarded values

Copper Contributor

I'm trying to join with wildcarded values such as the below with multiple fields. Does anyone know how to do this in KQL?

 

 

let X = datatable(Name:string, Src:string, Dest:string)
[
    'a','42.0.0.3','10.0.0.3',
    'b','42.0.0.3','20.33.44.55'
];
let Y = datatable(Name2:string, Src:string, Dest:string)
[
    'b','42.0.0.3','10.0.*',
    'c','42.0.0.3','20.33.44.55'
];
X | join Y on Src, Dest

 

 

Many thanks

0 Replies