Kusto nested json coming as null

2
votes

I am using Application Insights Log-Explorer query window to visualize the below query. Inside the field customDimensions.RemotePC I am string a json payload.

When I try to index the stored json via propery-indexing, i get the value as null. I tried to access it as array that turns null as well.

Could you please help me to access the FirstName property in below diagram.

enter image description here

1
azure-application-insightsazure-data-explorerkql
I've tried to reproduce it, but I couldn't. Could you please post output of traces | project test = '{"a": 1}' | project tst = parse_json(test) | extend tst.a. In my case, tst_a column has value of 1 in every row - geobreze
see similar: stackoverflow.com/questions/46164988/… - John Gardner

1 Answers

4
votes

Try this:

| extend todynamic(tostring(rpc)).FirstName

I believe that the issue is that rpc is string (although it looks as json). Thus you need to "cast" it to dynamic. You first need to tell the compiler though that this is a string value.