cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L4 Transporter

Hello @rhodgkins1 

 

Thanks for reaching out on LiveCommunity!

Please try using below query. json_extract() function can be used to extract JSON fields.

dataset = host_inventory
| filter os_type contains "OS_MAC"
| filter applications contains "netskope"
| arrayexpand applications
| alter abc = json_extract(applications ,"$.version")
| fields host_name, abc as Application_version

 

Please click Accept as Solution to acknowledge that the answer to your question has been provided.

Who rated this post