How can I query for a nested JSON object's attribute in Panther?
QUESTION
How can I query for a nested JSON object's attribute in Panther's Data Explorer?
ANSWER
You can query for the nested attributes by using Dot Notion: <column>:<level1_element>.<level2_element>.<level3_element>
For example, if you have the JSON data below:
... "userIdentity": { "accountId": "1234567890", "type": "AWSAccount" } ...
You could use the following Dot Notion:userIdentity:accountId = '1234567890'
For more information, see Snowflake Semi-structured Data docs here.