binary_all_xor() (aggregation function)

  • Article
  • 09/30/2024

Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Accumulates values using the binary XOR operation for each summarization group, or in total if a group is not specified.

Note

This function is used in conjunction with the summarize operator.

Syntax

binary_all_xor (expr)

Learn more about syntax conventions.

Parameters

Name Type Required Description
expr long ✔️ The value used for the binary XOR calculation.

Returns

Returns a value that is aggregated using the binary XOR operation over records for each summarization group, or in total if a group is not specified.

Example

The following example produces CAFEF00D using binary XOR operations:

Run the query

datatable(num:long)
[
  0x44404440,
  0x1E1E1E1E,
  0x90ABBA09,
  0x000B105A,
]
| summarize result = toupper(tohex(binary_all_xor(num)))

Output

results
CAFEF00D