Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

KQL parse string to json

Tags:

kql

I'm having troubles to understand the following. Why can't I convert directly using parse_json() func but have to use tostring() first?

Data types

Data type returned == string

Why can't I use the parse_json() function like this directly:

But have to apply the tostring func() first ?

Not working:

|extend x = gettype(parse_json(Properties_d.requestbody))

Working:


|extend x = gettype(parse_json(tostring(Properties_d.requestbody)))

Is it becuase:

like image 630
user211245 Avatar asked Sep 13 '26 09:09

user211245


1 Answers

this is explicitly explained in the documentation:

enter image description here

like image 139
Yoni L. Avatar answered Sep 22 '26 06:09

Yoni L.



Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!