Press "Enter" to skip to content

Array Expansion and Pivoting in KQL

Robert Cain continues a series on learning KQL:

In the previous article, Fun With KQL – Make_Set and Make_List, we saw how to get a list of items and return them in a JSON array. In this article we’ll see how to break that JSON array into individual rows of data using the mv-expand operator.

Read on to learn more about mv-expand.