title: Match partial string from list with field
body: <p>I'm trying to check if a field contains a value from a list using Kusto in Log analytics/Sentinel in Azure.</p>
  <p>The list contains top level domains but I only want matches for subdomains of these top levels domains. The list value example.com should match values such as forum.example.com or api.example.com.</p>
  <p>I got the following code but it does exact matches only.</p>
  <pre><code>let domains = dynamic([&quot;example.com&quot;, &quot;amazon.com&quot;, &quot;microsoft.com&quot;, &quot;google.com&quot;]);
  DeviceNetworkEvents
  | where RemoteUrl in~ (domains)
  | project TimeGenerated, DeviceName, InitiatingProcessAccountUpn, RemoteUrl
  </code></pre>
  <p>I tried with endswith, but couldn't get that to work with the list.</p>