Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expand docs - How to extract fields with varying names (pattern) #24

Open
lowell80 opened this issue Dec 20, 2018 · 0 comments
Open

Expand docs - How to extract fields with varying names (pattern) #24

lowell80 opened this issue Dec 20, 2018 · 0 comments
Assignees
Labels
docs Documentation

Comments

@lowell80
Copy link
Member

Add an example to the docs that highlights this search pattern:

 | jmespath output=NewDisplayName "ExtendedProperties[?Name=='targetUpdatedProperties'].Value | from_string(@[0]) | [?ends_with(Name,'.DisplayName')].NewValue"

Thanks to @jpapasadora

MS O365 Management.

Search something like: sourcetype=ms:o365:management member (group OR role)

@lowell80 lowell80 added the docs Documentation label Dec 20, 2018
@lowell80 lowell80 self-assigned this Dec 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs Documentation
Projects
None yet
Development

No branches or pull requests

1 participant