Forum Discussion

ratoor's avatar
ratoor
Copper Contributor
Jan 18, 2023
Solved

String to Column KQL

I want to extend DetectionMethods which is string data type in emailevents table. But this may apply to other tables and situations,     EmailEvents | take 1000 | extend kqlt=parse_json(Detection...
  • GBushey's avatar
    Jan 20, 2023
    Have you tried to use "mv-expand" on the columns?

Resources