pack_all()

Applies to: ✅ Azure Data ExplorerAzure MonitorMicrosoft Sentinel

Creates a dynamic property bag object from all the columns of the tabular expression.

Note

The representation of the returned object isn't guaranteed to be byte-level-compatible between runs. For example, properties that appear in the bag may appear in a different order.

Syntax

pack_all([ ignore_null_empty ])

Learn more about syntax conventions.

Parameters

Name Type Required Description
ignore_null_empty bool Indicates whether to ignore null/empty columns and exclude them from the resulting property bag. The default value is false.

Example

The following query will use pack_all() to create columns for the below table.

SourceNumber TargetNumber CharsCount
555-555-1234 555-555-1212 46
555-555-1234 555-555-1213 50
555-555-1313 42
555-555-3456 74
datatable(SourceNumber:string,TargetNumber:string,CharsCount:long)
[
'555-555-1234','555-555-1212',46,
'555-555-1234','555-555-1213',50,
'555-555-1313','',42, 
'','555-555-3456',74 
]
| extend Packed=pack_all(), PackedIgnoreNullEmpty=pack_all(true)

Output

SourceNumber TargetNumber CharsCount Packed PackedIgnoreNullEmpty
555-555-1234 555-555-1212 46 {"SourceNumber":"555-555-1234", "TargetNumber":"555-555-1212", "CharsCount": 46} {"SourceNumber":"555-555-1234", "TargetNumber":"555-555-1212", "CharsCount": 46}
555-555-1234 555-555-1213 50 {"SourceNumber":"555-555-1234", "TargetNumber":"555-555-1213", "CharsCount": 50} {"SourceNumber":"555-555-1234", "TargetNumber":"555-555-1213", "CharsCount": 50}
555-555-1313 42 {"SourceNumber":"555-555-1313", "TargetNumber":"", "CharsCount": 42} {"SourceNumber":"555-555-1313", "CharsCount": 42}
555-555-3456 74 {"SourceNumber":"", "TargetNumber":"555-555-3456", "CharsCount": 74} {"TargetNumber":"555-555-3456", "CharsCount": 74}

Note

There is a difference between the Packed and the PackedIgnoreNullEmpty columns in the last two rows of the above example. These two rows included empty values that were ignored by pack_all(true).