嗨，我正在尝试通过将一个查询放置在另一个查询的“where”中来获取日志事件。这可能吗？
AzureDiagnostics
| where resource_workflowName_s == "[Workflow Name]"
| where resource_runId_s == (AzureDiagnostics | where trackedProperties_PayloadID_g == "[GUID]" | distinct resource_runId_s)
最佳答案
尝试:
AzureDiagnostics
| where resource_workflowName_s == "[Workflow Name]"
| where resource_runId_s in (
toscalar(AzureDiagnostics
| where trackedProperties_PayloadID_g == "[GUID]"
| distinct resource_runId_s))
关于azure - NeSTLed查询日志分析，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/49174810/