I would like to use a variable which contains an array, so I can use it with in filter.
this works:
traces
| where cloud_RoleName in ("A", "B")
this does not work (syntax error):
let cloudRoleNames = ("A", "B");
traces
| where cloud_RoleName in cloudRoleNames
I would like to use the array as variable to be able to use the same filter in more joins at once. As a workaround I use the first working variant but it is not ideal. I tried various ways - as well via parsing json but nothing works. Am I missing something obvious? Thx
Try this instead:
let cloudRoleNames = dynamic(["A", "B"]);
traces
| where cloud_RoleName in (cloudRoleNames)
Relevant docs:
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With