Branch
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39
Logs
| where Timestamp > ago(1d)
| join
(
Events
| where continent == 'Europe'
) on RequestId
----------------------------------------------------
[
"Logs\r\n",
["operator", "|"],
["verb", "where"],
" Timestamp ",
["operator", ">"],
["function", "ago"],
["punctuation", "("],
["number", "1d"],
["punctuation", ")"],
["operator", "|"],
["verb", "join"],
["punctuation", "("],
"\r\n Events\r\n ",
["operator", "|"],
["verb", "where"],
" continent ",
["operator", "=="],
["string", "'Europe'"],
["punctuation", ")"],
["keyword", "on"],
" RequestId"
]