binary_all_or() (aggregation function)

  • Article
  • 09/30/2024

Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Accumulates values using the binary OR operation for each summarization group, or in total if a group is not specified.

Note

This function is used in conjunction with the summarize operator.

Syntax

binary_all_or (expr)

Learn more about syntax conventions.

Parameters

Name Type Required Description
expr long ✔️ The value used for the binary OR calculation.

Returns

Returns an aggregated value using the binary OR operation over records for each summarization group, or in total if a group is not specified.

Example

The following example produces CAFEF00D using binary OR operations:

Run the query

datatable(num:long)
[
  0x88888008,
  0x42000000,
  0x00767000,
  0x00000005, 
]
| summarize result = toupper(tohex(binary_all_or(num)))

Output

result
CAFEF00D