pack_all()

Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Creates a dynamic property bag object from all the columns of the tabular expression.

Note

The representation of the returned object isn't guaranteed to be byte-level-compatible between runs. For example, properties that appear in the bag might appear in a different order.

Syntax

pack_all([ ignore_null_empty ])

Learn more about syntax conventions.

Parameters

Name Type Required Description
ignore_null_empty bool Indicates whether to ignore null/empty columns and exclude them from the resulting property bag. The default value is false.

Example

The following query uses pack_all() to create packed columns.

Run the query

datatable(Source:string,Target:string,CharsCount:long)
[
'555-1234','555-1212',46,
'555-1234','555-1213',50,
'555-1313','',42, 
'','555-3456',74 
]
| extend Packed=pack_all(), PackedIgnoreNullEmpty=pack_all(true)

Output

Source Target CharsCount Packed PackedIgnoreNullEmpty
555-1234 555-1212 46 {
"Source":"555-1234",
"Target":"555-1212",
"CharsCount": 46
}		 {
"Source":"555-1234",
"Target":"555-1212",
"CharsCount": 46
}
555-1234 555-1213 50 {
"Source":"555-1234",
"Target":"555-1213",
"CharsCount": 50
}		 {
"Source":"555-1234",
"Target":"555-1213",
"CharsCount": 50
}
555-1313 42 {
"Source":"555-1313",
"Target":"",
"CharsCount": 42
}		 {
"Source":"555-1313",
"CharsCount": 42
}
555-3456 74 {
"Source":"",
"Target":"555-3456",
"CharsCount": 74
}		 {
"Target":"555-3456",
"CharsCount": 74
}

Note

There's a difference between the Packed and the PackedIgnoreNullEmpty columns in the last two rows of the example. These two rows included empty values that were ignored by pack_all(true).

Related content