What is the syntax to query semi-structured data with spaces in the fields for PantherFlow?
Last updated: November 26, 2025
QUESTION
How do I query semi-structured data fields that contain spaces using PantherFlow?
ANSWER
To query fields containing spaces in PantherFlow, use the object reference syntax: object['X']
For example, use this syntax:
p_enrichment['Registry User Lookup Table.p_any_usernames.[].kind']
to retrieve the value at
p_enrichment.Registry User Lookup Table.p_any_usernames.[].kind
For more information, see the PantherFlow References documentation.