Azure图查询命令中的Azure图查询

Question

Resources
| where type has "microsoft.compute/disks"
| extend diskState = tostring(properties.diskState)
| where managedBy == ""
or diskState == 'Attached'
or diskState == 'Unattached'
| project name, diskState,managedBy,resourceGroup, location, subscriptionId, properties.diskSizeGB, properties.timeCreated

如何将此KQL查询转换为az图查询命令？

Answer 1

我来自微软创始人集线器团队。我能够运行它，它按预期工作：

az graph query -q 
"Resources
| where type has 'microsoft.compute/disks'
| extend diskState = tostring(properties.diskState)
| where managedBy == ''
or diskState == 'Attached'
or diskState == 'Unattached'
| project name, diskState,managedBy,resourceGroup, location, subscriptionId, properties.diskSizeGB, properties.timeCreated"

在查看您的代码块时，提交了：

az graph query -q “
Resources 
| where type =~ ‘microsoft.compute/disks’ 
| extend diskState = tostring(properties.diskState) 
| where managedBy == "" or diskState == 'Attached' or diskState == 'Unattached' 
| project name, diskState,managedBy,resourceGroup, location, subscriptionId, diskSize=properties.diskSizeGB, timeCreation=properties.timeCreated
” 
--query ‘
data[].{Disk_Name:name, Disk_State:diskState, Managed_By:managedBy, Resource_Group:resourceGroup, Location:location, Subscription_Id:subscriptionId, Disk_Size:diskSize, Time_of_Creation:timeCreation}
’ 
-o tsv

我注意到您有两个“查询”参数，查询中有双引号。请将双引号转换为单引号，并且只使用一个查询参数。

请查看此信息以获得更多信息：https://learn.microsoft.com/en-us/azure/governance/resource-graph/concepts/explore-resources