NetworkMonitoring - parse IP addresses in 'Path' column

[Scott Allison]

Greetings,

We are currently evaluating the features in the "Network Performance Monitoring" solution for Log Analytics. When we query for SubType "EndpointPath", the "Path" column has great detail for the hops that the test takes. However, it contains all the IP addresses together in the same field.

Example (I've masked out the middle parts):

146.xxx.xxx.31 146.xxx.xxx.2 139.xxx.xxx.153 139.xxx.xxx.241 139.xxx.xxx.242 146.xxx.xxx.89 146.xxx.xxx.166 139.xxx.xxx.92 139.xxx.xxx.103 * * 104.xxx.xxx.191 104.xxx.xxx.198 104.xxx.xxx.194 * * 25.xxx.xxx.15 25.xxx.xxx.39 25.xxx.xxx.46 40.xxx.xxx.34

I can't seem to figure out how to parse the IP addresses in that column to their own columns (IP1, IP2, etc) and in the order that they're listed in the column. 

Any thoughts/ideas on this? 

[#2]

Have you tried using the split with space as separator?
https://docs.loganalytics.io/docs/Language-Reference/Scalar-functions/split()

[#3]

I have not, but this looks like what I need. Thanks!