has_any_index()
Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel
Searches the string for items specified in the array and returns the position in the array of the first item found in the string.
Syntax
has_any_index (source, values)
Learn more about syntax conventions.
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| source | string |
✔️ | The value to search. |
| values | dynamic |
✔️ | An array of scalar or literal expressions to look up. |
Returns
Zero-based index position of the first item in values that is found in source. Returns -1 if none of the array items were found in the string or if values is empty.
Example
print
idx1 = has_any_index("this is an example", dynamic(['this', 'example'])) // first lookup found in input string
, idx2 = has_any_index("this is an example", dynamic(['not', 'example'])) // last lookup found in input string
, idx3 = has_any_index("this is an example", dynamic(['not', 'found'])) // no lookup found in input string
, idx4 = has_any_index("Example number 2", range(1, 3, 1)) // Lookup array of integers
, idx5 = has_any_index("this is an example", dynamic([])) // Empty lookup array
Output
| idx1 | idx2 | idx3 | idx4 | idx5 |
|---|---|---|---|---|
| 0 | 1 | -1 | 1 | -1 |