Hello,
I can parse CSV data with this KQL in LAW:
parse_csv(RawData)
However, when I use it in the Transform section of the Data Collection Rule, I get the following error:
Update Error - Error occurred while compiling query in query: SemanticError:0x00000009 at 1:28 : Runtime scalar function provider not found for function: parse_csv
Transform:
source | extend CSVFields = parse_csv(RawData)
I already tried this: split(RawData, ',')
If a data is in double quotes and contains a comma, it continues to split, so this is against the structure of CSV.
How can I parse a CSV file in DCR?
Best Regards.