Pair functions

​

Pair functions

Each argument has a required section which is denoted with required or optional

• If it’s denoted by required it means the argument must be passed into that function before it’ll work.
• if it’s denoted by optional it means the function can work without passing the argument value.

​

pair()

Creates a pair from a key and value.

​

Arguments

​

Returns

Returns a pair with the key Key and the value Value with the separator Seperator.

​

Examples

pair("key", "value", ".")

['logs']
| where tags contains pair("host", "mymachine")

Run in Playground

​

parse_pair()

Creates a pair from a key and value.

​

Arguments

​

Returns

Returns a pair with the key and value separated by the separator Seperator in Pair. If none is found a pair with the value of Pair and an empty key is returned.

​

Examples

parse_pair("key.value", ".")

['logs']
| where parse_pair(tags[0]).key == "host"

Run in Playground