Edit

Share via


cursor_after()

Applies to: ✅ Microsoft FabricAzure Data ExplorerAzure MonitorMicrosoft Sentinel

A predicate runs over the records of a table to compare their ingestion time against a database cursor.

Note

This function can only be invoked on records of a table that has the IngestionTime policy enabled.

Syntax

cursor_after(RHS)

Learn more about syntax conventions.

Parameters

Name Type Required Description
RHS string ✔️ Either an empty string literal or a valid database cursor value.

Returns

Returns a scalar value of type bool that indicates whether the record was ingested after the database cursor RHS (true) or not (false).

Examples

The following example retrieves records ingested after a specific database cursor.

MyTable
| where cursor_after('2024-08-01T00:00:00Z')

Output The output includes all records from MyTable that were ingested after the specified date, August 1, 2024.