Skip to content

Commit e253088

Browse files
committed
fix
1 parent 9996b98 commit e253088

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

articles/azure-monitor/essentials/data-collection-transformations-structure.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -309,18 +309,18 @@ The following [Bitwise operators](/azure/data-explorer/kusto/query/binoperators)
309309

310310
#### Special functions
311311

312-
-parse_cef_dictionary()
312+
`parse_cef_dictionary()`<br><br>
313313

314-
Given a string containing a CEF message, `parse_cef_dictionary` parses the Extension property of the message into a dynamic key/value object. Semicolon is a reserved character that should be replaced prior to passing the raw message into the method, as shown in the example below.
314+
Given a string containing a CEF message, `parse_cef_dictionary` parses the Extension property of the message into a dynamic key/value object. Semicolon is a reserved character that should be replaced prior to passing the raw message into the method, as shown in the example below.
315315

316-
```kusto
317-
| extend cefMessage=iff(cefMessage contains_cs ";", replace(";", " ", cefMessage), cefMessage)
318-
| extend parsedCefDictionaryMessage =parse_cef_dictionary(cefMessage)
319-
| extend parsecefDictionaryExtension = parsedCefDictionaryMessage["Extension"]
320-
| project TimeGenerated, cefMessage, parsecefDictionaryExtension
321-
```
316+
```kusto
317+
| extend cefMessage=iff(cefMessage contains_cs ";", replace(";", " ", cefMessage), cefMessage)
318+
| extend parsedCefDictionaryMessage =parse_cef_dictionary(cefMessage)
319+
| extend parsecefDictionaryExtension = parsedCefDictionaryMessage["Extension"]
320+
| project TimeGenerated, cefMessage, parsecefDictionaryExtension
321+
```
322322

323-
:::image type="content" source="media/data-collection-transformations-structure/parse_cef_dictionary.png" lightbox="media/data-collection-transformations-structure/parse_cef_dictionary.png" alt-text="Sample output of parse_cef_dictionary function.":::
323+
:::image type="content" source="media/data-collection-transformations-structure/parse_cef_dictionary.png" lightbox="media/data-collection-transformations-structure/parse_cef_dictionary.png" alt-text="Sample output of parse_cef_dictionary function.":::
324324

325325

326326
### Identifier quoting

0 commit comments

Comments
 (0)