<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Need help in DQL to expand columns in DQL</title>
    <link>https://community.dynatrace.com/t5/DQL/Need-help-in-DQL-to-expand-columns/m-p/275728#M1977</link>
    <description>&lt;P&gt;Hello Community,&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;We need help in one of the DQL to expand one of the columns which are in JSON. We got to this final column from nested jsons and previously in the same query used "&lt;/SPAN&gt;&lt;SPAN class=""&gt;fieldsFlatten"&amp;nbsp; to&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN&gt;flatten a single nested row to many rows. But the flatten rows are not getting expanded. This is required to create a dashboard for the data.&lt;BR /&gt;&lt;BR /&gt;Query::&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;fetch logs&lt;BR /&gt;| filter matchesValue(aws.account.id, "674210405359")&lt;BR /&gt;| filter dt.security_context == "14025"&lt;BR /&gt;| filter aws.log_group == "/mcs-ops-remote-patching/"&lt;BR /&gt;| fieldsKeep content&lt;BR /&gt;| parse content, "JSON:data_payload"&lt;BR /&gt;| fieldsFlatten data_payload, depth: 10&lt;/P&gt;&lt;P&gt;| expand data_payload.StepExecutions&lt;/P&gt;&lt;P&gt;| fields data_payload.StepExecutions, data_payload.Account_Id, data_payload.Region_Name, data_payload.ProductID&lt;BR /&gt;| fieldsFlatten data_payload.StepExecutions, depth: 10&lt;BR /&gt;| filter data_payload.StepExecutions.StepName == "PostPatching_notification" or data_payload.StepExecutions.StepName == "patch_summary"&lt;/P&gt;&lt;P&gt;| fieldsKeep data_payload.StepExecutions.Outputs.patchsummary&lt;BR /&gt;| expand data_payload.StepExecutions.Outputs.patchsummary, limit: 10&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 23 Apr 2025 09:37:17 GMT</pubDate>
    <dc:creator>imsummii</dc:creator>
    <dc:date>2025-04-23T09:37:17Z</dc:date>
    <item>
      <title>Need help in DQL to expand columns</title>
      <link>https://community.dynatrace.com/t5/DQL/Need-help-in-DQL-to-expand-columns/m-p/275728#M1977</link>
      <description>&lt;P&gt;Hello Community,&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;We need help in one of the DQL to expand one of the columns which are in JSON. We got to this final column from nested jsons and previously in the same query used "&lt;/SPAN&gt;&lt;SPAN class=""&gt;fieldsFlatten"&amp;nbsp; to&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN&gt;flatten a single nested row to many rows. But the flatten rows are not getting expanded. This is required to create a dashboard for the data.&lt;BR /&gt;&lt;BR /&gt;Query::&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;fetch logs&lt;BR /&gt;| filter matchesValue(aws.account.id, "674210405359")&lt;BR /&gt;| filter dt.security_context == "14025"&lt;BR /&gt;| filter aws.log_group == "/mcs-ops-remote-patching/"&lt;BR /&gt;| fieldsKeep content&lt;BR /&gt;| parse content, "JSON:data_payload"&lt;BR /&gt;| fieldsFlatten data_payload, depth: 10&lt;/P&gt;&lt;P&gt;| expand data_payload.StepExecutions&lt;/P&gt;&lt;P&gt;| fields data_payload.StepExecutions, data_payload.Account_Id, data_payload.Region_Name, data_payload.ProductID&lt;BR /&gt;| fieldsFlatten data_payload.StepExecutions, depth: 10&lt;BR /&gt;| filter data_payload.StepExecutions.StepName == "PostPatching_notification" or data_payload.StepExecutions.StepName == "patch_summary"&lt;/P&gt;&lt;P&gt;| fieldsKeep data_payload.StepExecutions.Outputs.patchsummary&lt;BR /&gt;| expand data_payload.StepExecutions.Outputs.patchsummary, limit: 10&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 23 Apr 2025 09:37:17 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/DQL/Need-help-in-DQL-to-expand-columns/m-p/275728#M1977</guid>
      <dc:creator>imsummii</dc:creator>
      <dc:date>2025-04-23T09:37:17Z</dc:date>
    </item>
    <item>
      <title>Re: Need help in DQL to expand columns</title>
      <link>https://community.dynatrace.com/t5/DQL/Need-help-in-DQL-to-expand-columns/m-p/275793#M1980</link>
      <description>&lt;P&gt;&lt;EM&gt;&lt;STRONG&gt;fieldsFlatten&lt;/STRONG&gt; &lt;/EM&gt;does not "&lt;SPAN&gt;flatten a single nested row to many rows". &lt;EM&gt;&lt;STRONG&gt;expand&amp;nbsp;&lt;/STRONG&gt;&lt;/EM&gt;command&amp;nbsp;can expand single field being an array into multiple rows.&lt;BR /&gt;&lt;BR /&gt;data_payload.StepExecutions.Outputs.patchsummary seems to be just object (or maybe string representing object?), so applying &lt;EM&gt;&lt;STRONG&gt;expand&lt;/STRONG&gt; &lt;/EM&gt;on it does not change anything&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 23 Apr 2025 19:35:06 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/DQL/Need-help-in-DQL-to-expand-columns/m-p/275793#M1980</guid>
      <dc:creator>krzysztof_hoja</dc:creator>
      <dc:date>2025-04-23T19:35:06Z</dc:date>
    </item>
  </channel>
</rss>

