| title | description | ms.topic | ms.service | ms.author | author | ms.date |
|---|---|---|---|---|---|---|
Example log table queries for ConfidentialWatchlist |
Example queries for ConfidentialWatchlist log table |
reference |
azure-monitor |
edbaynash |
EdB-MSFT |
02/18/2024 |
Gets a distinct list of all confidential Watchlist aliases in a workspace.
ConfidentialWatchlist
| take 100
Lookup events in Heartbeat table against data from a Watchlist by treating the confidential Watchlist as a table for joins and lookups.
Heartbeat
| lookup kind=leftouter _GetWatchlist('mywatchlist')
on $left.ComputerIP == $right.SearchKey
| limit 100