https://community.dynatrace.com/t5/DQL/Query-and-Parse-JSON-Data-Using-DQL-for-Structured-Analysis/m-p/287255#M2645 <P>Use the command expand. At the end of your DQL, add: "| expand Records". Then keep expanding the fields that still has a json format as result and you need go deeper.</P><P><A href="https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/dynatrace-query-language/commands/structuring-commands#expand" target="_blank">https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/dynatrace-query-language/commands/structuring-commands#expand</A>&nbsp;</P> Thu, 02 Oct 2025 21:01:15 GMT dannemca 2025-10-02T21:01:15Z https://community.dynatrace.com/t5/DQL/Query-and-Parse-JSON-Data-Using-DQL-for-Structured-Analysis/m-p/287246#M2644 <P>Could you help extracting all fields from JSON.<BR /><BR />below is my query that returns JSON. But how to extract all fields?<BR /><BR />data record(content = "[DEBUG][FILE][WATCHER] 2025-10-02 06:04:21.132 Ally UUID: s3_ALFA_WDFINBAL5_INT_IB_592e9bc0abae42649b9ed349e7039157 Application:ALFA_WDFINBAL5_INT_IB Intercept Lambda Event:{'Records': [{'eventVersion': '2.1', 'eventSource': 'aws:s3', 'awsRegion': 'us-east-1', 'eventTime': '2025-10-02T06:04:18.307Z', 'eventName': 'ObjectCreated:Put', 'userIdentity': {'principalId': 'AWS:AIDAQV7FB7VS6YFJ7SCRZ'}, 'requestParameters': {'sourceIPAddress': '444.44.88.44'}, 'responseElements': {'x-amz-request-id': '4444', 'x-amz-id-2': 'dsfdsfdsf'}, 's3': {'s3SchemaVersion': '1.0', 'configurationId': 'tf-s3-lambda-20250207135221620300000006', 'bucket': {'name': 'eap-s3-data-link-444-upload', 'ownerIdentity': {'principalId': 'dsfdf'}, 'arn': 'arn<img class="lia-deferred-image lia-image-emoji" src="https://community.dynatrace.com/html/@F9676CCDE08B8746467ACFFDC4C9827E/images/emoticons/aws.png" alt=":aws:" title=":aws:" />s3:::eap-s3-data-link-201164-cap-us-east-1-eap-s3-upload'}, 'object': {'key': 'ALFA_WDFINBAL5_INT_IB/FINT091_IB_ALFA_AC_SAPGLAccts_Bal5_20251002005805.csv', 'size': 690, 'eTag': 'dfdf', 'versionId': '44_o73Yte5hklj5bjAamCR7', 'sequencer': '0068DE15E23267E9A2'}}}], 's3-uuid': 's3_ALFA_WDFINBAL5_INT_IB_592e9bc0abae42649b9ed349e7039157'}")<BR />| filter contains(content, "Intercept Lambda Event")<BR />| parse content, """LD 'Intercept Lambda Event:' JSON(strict=false):json"""<BR />| fieldsFlatten json<BR />| fields Records=json.Records</P> Wed, 17 Dec 2025 13:06:14 GMT https://community.dynatrace.com/t5/DQL/Query-and-Parse-JSON-Data-Using-DQL-for-Structured-Analysis/m-p/287246#M2644 ramchandgadde 2025-12-17T13:06:14Z https://community.dynatrace.com/t5/DQL/Query-and-Parse-JSON-Data-Using-DQL-for-Structured-Analysis/m-p/287255#M2645 <P>Use the command expand. At the end of your DQL, add: "| expand Records". Then keep expanding the fields that still has a json format as result and you need go deeper.</P><P><A href="https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/dynatrace-query-language/commands/structuring-commands#expand" target="_blank">https://docs.dynatrace.com/docs/discover-dynatrace/platform/grail/dynatrace-query-language/commands/structuring-commands#expand</A>&nbsp;</P> Thu, 02 Oct 2025 21:01:15 GMT https://community.dynatrace.com/t5/DQL/Query-and-Parse-JSON-Data-Using-DQL-for-Structured-Analysis/m-p/287255#M2645 dannemca 2025-10-02T21:01:15Z