Tabular Operators

where operator

Filters out a dataset to a branch of rows that meets a condition when executed.

Syntax

| where condition

Arguments

nametypedescription
ConditionbooleanA bool expression over the columns of the dataset, it's then checked for each row in your dataset

Returns

Rows in dataset for which condition is true.

Example

['http-logs']
| where method == 'GET' and content_type == 'image/jpeg'

Was this page helpful?