Extracting columns from semi-structured data (variant columns)

kristian · September 19, 2020, 8:39pm

I use Sigma’s extract columns function to parse JSON data from variant columns. Does Sigma also support extracting columns from other semi-structured data types (Avro, ORC, and Parquet)?

Ryan · September 22, 2020, 6:14pm

Hey Kristian!

Glad the JSON parsing feature is coming in handy! Unfortunately, we do not support any extraction from any other semi-structured data types at this moment. I’ll go ahead and submit this as a feature request for you!

system · October 17, 2020, 10:31am

system · October 31, 2020, 11:55pm

system · November 20, 2020, 1:17pm

system · December 9, 2020, 3:49pm

system · December 29, 2020, 3:18am

system · January 18, 2021, 7:45am

system · February 7, 2021, 4:26pm

system · March 1, 2021, 1:51am

system · March 22, 2021, 11:41am

system · April 13, 2021, 1:39am

system · May 4, 2021, 8:42pm

system · May 26, 2021, 4:45pm

system · June 18, 2021, 8:46am

system · July 11, 2021, 4:58am

system · August 2, 2021, 5:09pm

system · August 25, 2021, 6:22pm

system · September 18, 2021, 6:10am

system · October 11, 2021, 9:43pm