Hello Team,
I not sure what I am missing but I am unable to extract or display ModifiedProperties{}.Name fields into table.
For example: Under extended fields of ModifiedProperties{}.Name there is another field "OtherMail". I would like to display OtherMail field value/data into a table
I remember doing sometime back but seems to have completely forgotten.
Can someone please help with it.
Thanks in advance,
According to the screenshot, "OtherMail" is one of the values of ModifiedProperties{}.Name, not a field. Display it using the table command
| where ModifiedProperties{}.Name="OtherMail"
| table ModifiedProperties{}.Name, ModifiedProperties{}.OldValue, ModifiedProperties{}.NewValue
Thanks for replying, Unfortunately, the command is not working.