Are SQL aliases case-sensitive in Panther's JSON output?

Last updated: November 20, 2024

Are SQL aliases case-sensitive in Panther's JSON output?

When using SQL queries in Panther's Data Explorer, you may notice that the column names in the resultant JSON do not match the exact casing specified in your SQL command. This is expected behavior due to the normalization process in the backend.

ANSWER

When you use the `AS` command to alias a column, the inserted name is automatically converted to lowercase format. For example:

SELECT column AS MyFieldName

This query will return a result with the column name as:

myfieldname

This behavior is due to the normalization process in the backend, which is necessary to translate the columns to the original JSON casing.