Take for example:
How do I combine multiple fields into a string so I can do some funky filtering.
As an example of what I'm trying to do:
* | parse "regex" as field1 | parse "regex2" as field2 | where concatenate(field1,field2) not in ("some","more","examples")
Please sign in to leave a comment.