Skip to main content
Panther Knowledge Base

How do I query on a nested field within arrays in Panther?

  1. Last updated
  2. Save as PDF

QUESTION

How do I query on a nested field within arrays?

ANSWER

You can check all elements in your log event using the FLATTEN command. This Snowflake article provides an example of how to use the FLATTEN function to parse nested arrays.