Closed larsgw closed 3 years ago
Adds the following tag-related syntax to KQL:
document > info > (author)
info
document
foo > ()
foo
data > [tag() ^= "base"]
data
ip-blocklist > ip[val() = (ipv6)]
ip
ip-blocklist
ipv6
val()
prop()
I also removed name() from the list of values that numeric operators work on since those are never numbers (right?).
name()
Adds the following tag-related syntax to KQL:
document > info > (author)
selects any nodes tagged "author" ininfo
indocument
.foo > ()
selects any nodes with tags infoo
.data > [tag() ^= "base"]
selects any nodes indata
with a tag that starts with "base". Other string operators are also supported.ip-blocklist > ip[val() = (ipv6)]
selects anyip
node inip-blocklist
where the first value is taggedipv6
. This only works forval()
andprop()
.I also removed
name()
from the list of values that numeric operators work on since those are never numbers (right?).