Forum Discussion
CalumS
Bronze III
3 months agoKusto Query Language: Ep.9 – Parsing Complex Data Types.
Hi all, I am stuck on Question 6 as part of the KQL Parsing Complex Data Types. I have been doing adaptations of the following query to only get a blank AvgTime table each time. Event_CL | whe...
CalumS
Bronze III
3 months agoHey, thank for the help, got me a bit of the way there.
Ended up working with the following:
Event_CL
| extend ParsedXml = parse_xml(EventData)
| where tostring(ParsedXml) contains "KB2267602"
| summarize avg_time = avg(todatetime(ParsedXml.DataItem["@time"]))
But got a value and put it in to be incorrect, did attempt a few variations of it incase it wanted in a certain format.
SamDickison
Community Manager
2 months agoHi CalumS did you manage to completed the lab?
- CalumS2 months ago
Bronze III
Hi SamDickison Not managed to yet with the help above or had time to get back and try again. Will do soon hopefully and get back to you.