!endswith
The !endswith operator applies a case-sensitive ending string filter and excludes events that match.
The following table compares the endswith operators using these abbreviations:
- RHS = right-hand side of the expression
- LHS = left-hand side of the expression
| Operator | Description | Case-Sensitive | Example (yields true) |
|---|---|---|---|
endswith | RHS is a closing subsequence of LHS | No | "Fabrikam" endswith "Kam" |
!endswith | RHS isn’t a closing subsequence of LHS | No | "Fabrikam" !endswith "brik" |
endswith_cs | RHS is a closing subsequence of LHS | Yes | "Fabrikam" endswith_cs "kam" |
!endswith_cs | RHS isn’t a closing subsequence of LHS | Yes | "Fabrikam" !endswith_cs "brik" |
Syntax
Scope | where Field !endswith String
Arguments
- Scope: The input tabular result set to filter.
- Field: The field to filter.
- String: The string used to filter.
Example
dataset=myDataset
| summarize Events=count() by State
| where State !endswith "is"