Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Expand docs - How to extract fields with varying names (pattern) #24

Open
lowell80 opened this issue Dec 20, 2018 · 0 comments
Open

Expand docs - How to extract fields with varying names (pattern) #24

lowell80 opened this issue Dec 20, 2018 · 0 comments
Assignees
Labels
docs Documentation

Comments

@lowell80
Copy link
Member

Add an example to the docs that highlights this search pattern:

 | jmespath output=NewDisplayName "ExtendedProperties[?Name=='targetUpdatedProperties'].Value | from_string(@[0]) | [?ends_with(Name,'.DisplayName')].NewValue"

Thanks to @jpapasadora

MS O365 Management.

Search something like: sourcetype=ms:o365:management member (group OR role)

@lowell80 lowell80 added the docs Documentation label Dec 20, 2018
@lowell80 lowell80 self-assigned this Dec 20, 2018
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
docs Documentation
Projects
None yet
Development

No branches or pull requests

1 participant