set_has_element returns true when a dynamic array contains a specific element and false when it doesn’t. Use it to perform fast membership checks on values that you have already aggregated into a set with functions such as make_set.

#For users of other query languages

If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.

index=web
| stats values(uri) AS uris BY id
| where "/checkout" in uris

['sample-http-logs']
| summarize uris=make_set(uri) by id
| where set_has_element(uris, '/checkout')

SELECT   id
FROM     sample_http_logs
GROUP BY id
HAVING   'US' = ANY(ARRAY_AGG(country));

['sample-http-logs']
| summarize countries=make_set(['geo.country']) by id
| where set_has_element(countries, 'US')

#Usage

#Syntax

set_has_element(set, value)

#Parameters

#Returns

A bool that’s true when value exists in set and false otherwise.

#Example

Use set_has_element to determine if a set contains a specific value.

Query

['sample-http-logs']
| extend hasElement = set_has_element(dynamic([1, 2, 3]), 2)

Run in Playground

Output

#List of related functions

• set_difference: Returns elements in the first array that aren’t in the second. Use it to find exclusions.
• set_union: Returns the union of two or more sets. Use it when you need any element that appears in at least one set instead of every set.