Hello Team,
I not sure what I am missing but I am unable to extract or display ModifiedProperties{}.Name fields into table.
For example: Under extended fields of ModifiedProperties{}.Name there is another field "OtherMail". I would like to display OtherMail field value/data into a table
I remember doing sometime back but seems to have completely forgotten.
Can someone please help with it.
spodda01da_0-1630937080662.png
Thanks in advance,
According to the screenshot, "OtherMail" is one of the values of ModifiedProperties{}.Name, not a field. Display it using the table command
| where ModifiedProperties{}.Name="OtherMail"
| table ModifiedProperties{}.Name, ModifiedProperties{}.OldValue, ModifiedProperties{}.NewValue
Thanks for replying, Unfortunately, the command is not working.