Skip to content

Latest commit

 

History

History
68 lines (47 loc) · 2.37 KB

has-cs-operator.md

File metadata and controls

68 lines (47 loc) · 2.37 KB
title description ms.reviewer ms.topic ms.date
The case-sensitive has_cs string operator
Learn how to use the has_cs operator to filter data with a case-sensitive search string.
alexans
reference
12/28/2022

has_cs operator

Filters a record set for data with a case-sensitive search string. has_cs searches for indexed terms, where an indexed term is three or more characters. If your term is fewer than three characters, the query scans the values in the column, which is slower than looking up the term in the term index.

[!INCLUDE has-operator-comparison]

Performance tips

[!INCLUDE performance-tip-note]

Syntax

T | where Column has_cs (Expression)

[!INCLUDE syntax-conventions-note]

Parameters

Name Type Required Description
T string ✔️ The tabular input whose records are to be filtered.
Column string ✔️ The column used to filter the records.
Expression scalar or tabular ✔️ An expression for which to search. If the value is a tabular expression and has multiple columns, the first column is used.

Returns

Rows in T for which the predicate is true.

Example

[!div class="nextstepaction"] Run the query

StormEvents
| summarize event_count=count() by State
| where State has_cs "FLORIDA"

Output

State event_count
FLORIDA 1042

Since all State values are capitalized, searching for a lowercase string with the same value, such as "florida", won't yield any results.

[!div class="nextstepaction"] Run the query

StormEvents
| summarize event_count=count() by State
| where State has_cs "florida"

Output

State event_count