match regex operator

Filters a record set based on a case-sensitive regex value.

For further information about other operators and to determine which operator is most appropriate for your query, see datatype string operators.

Performance tips

Note

Performance depends on the type of search and the structure of the data.

For best practices, see Query best practices.

Syntax

T | where col matches regex (expression)

Arguments

  • T - The tabular input whose records are to be filtered.
  • col - The column to filter.
  • expression - Scalar or literal expression.

Returns

Rows in T for which the predicate is true.

Example

StormEvents
    | summarize event_count=count() by State
    | where State matches regex "K.*S"
    | where event_count > 10
    | project State, event_count

Output

State event_count
KANSAS 3166
ARKANSAS 1028
LAKE SUPERIOR 34
LAKE ST CLAIR 32