I only want to display the events in Data Explorer (advanced) that contain a certain string, for example "Playerscore". But my code is not working because the events have ExecutionResult like this: "Playerscore: 5500", "Playerscore: 5907", "Itemsused: 8".
My code only works if I enter the exact string like for example "Playerscore: 5500" instead of "Playerscore". Then, it displays the event where ExecutionResult = "Playerscore: 5500". But I want to display all the events that contain the string "Playerscore" in ExecutionResult.
How can I only display the events("Playerscore: 5500", "Playerscore: 5907") that contain "Playerscore"?
['events.all'] | where FullName_Name == 'player_reported_as_abusive' | extend d=parse_json(EventData) | extend ExecutionResult = d.Comment | where ExecutionResult == "Playerscore"