-
Notifications
You must be signed in to change notification settings - Fork 3.5k
Description
Describe the bug
I raised PR #13170, and the KqlvalidationsTests failed stating that replace_strings is not a valid function name. However it is a valid function name, documented here and works fine through the Azure Portal
To Reproduce
Steps to reproduce the behavior:
- Prepare a new contribution that utilises a newer kql function, such as
replace_strings - Raise a PR to this repo for somethign which will trigger the kql-validations.yaml workflow
- An error will be returned stating Errors: the name 'replace_strings' does not refer to any known function
Expected behavior
The validation should pass if the function is a valid kql function
Additional context
The issue lies with Microsoft.Azure.Sentinel.KustoServices.dll, which is inside the Microsoft.Azure.Sentinel.KustoServices.6.7.0.nupkg. The dll is built with version 11.0.0 of the Microsoft.Azure.Kusto.Language nuget package, which is visible in the nuspec file (attached).
Version 11 of Microsoft.Azure.Kusto.Language was released in 19/09/2022 which is over 3 years old. Is it able to be refreshed with the latest version?
Additionally, could it potentially be open sourced and setup with a github action to rebuild regularly to the latest one to keep it up to date in the future?