How to filter all in KQL

HI all,

may i know how i want to filter all in KQL?

Can you elaborate on what exactly you are trying to achieve? If you want to filter out all document which have a threat id, you can use this: NOT*

I have try using NOT* but its not appear all threat id. However, its appear other than threat id.. So, i change the KQL to* and its working..

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.