The case-sensitive has_cs string operator

Learn how to use the has_cs operator to filter data with a case-sensitive search string.

Filters a record set for data with a case-sensitive search string. has_cs searches for indexed terms, where an indexed term is three or more characters. If your term is fewer than three characters, the query scans the values in the column, which is slower than looking up the term in the term index.

Performance tips

Syntax

T | where Column has_cs (Expression)

Parameters

NameTypeRequiredDescription
Tstring✔️The tabular input whose records are to be filtered.
Columnstring✔️The column used to filter the records.
Expressionscalar or tabular✔️An expression for which to search. If the value is a tabular expression and has multiple columns, the first column is used.

Returns

Rows in T for which the predicate is true.

Example

StormEvents
| summarize event_count=count() by State
| where State has_cs "FLORIDA"

Output

Stateevent_count
FLORIDA1042

Since all State values are capitalized, searching for a lowercase string with the same value, such as “florida”, won’t yield any results.

StormEvents
| summarize event_count=count() by State
| where State has_cs "florida"

Output

Stateevent_count