The jobID function returns the unique identifier assigned to the current search job.

You can use jobID to tag exported results, distinguish between concurrent or scheduled search runs, and correlate results written to different destinations.

Syntax

​

jobID()

Arguments

​

None.

Returns

​

A string containing the unique identifier of the current search job.

Examples

​

Tag each exported event with the ID of the search that produced it:

dataset=myDataset
|| extend search_id=jobID()
|| export to lake myEnrichedDataset

Combine jobID with other context functions to build a full audit trail on export:

dataset=myDataset
|| extend search_id=jobID(), run_by=user(), search_query=query()
|| export to lake myAuditDataset