Forum Discussion
LA1976
Mar 05, 2021Copper Contributor
How to split up field containing CSV like data
I have a field that contains the folliwng data #012rt=Mar 04 2021 16:21:40;GMT#012deviceExternalId=;6C2331FFBFD96B1#012src=;10.1.16.4#012dst=;89.238.73.97#012sourceTranslatedAddress=;10....
GaryBushey
Mar 05, 2021Bronze Contributor
LA1976 You can use the split() command which will convert it into a string array which you can then index each field individually. There is a parse_csv() command as well but it only works on comma separated fields and your string is semi-colon delimited.
https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/splitfunction