Extracting columns from semi-structured data (variant columns)

I use Sigma’s extract columns function to parse JSON data from variant columns. Does Sigma also support extracting columns from other semi-structured data types (Avro, ORC, and Parquet)?

Hey Kristian!

Glad the JSON parsing feature is coming in handy! Unfortunately, we do not support any extraction from any other semi-structured data types at this moment. I’ll go ahead and submit this as a feature request for you!