How do I extract the filter field from Azure Resource Graph Explorer

Question

Using Azure Resource Graph Explorer I am trying to extract fields from the properties column in the maintenanceresources table.

I can extract properties.maintenanceConfigurationId and properties.resourceId however I cannot extract properties.filter as if "filter" is a disallowed word

maintenanceresources | project properties.filter

gives a parser failure.

Anyone got any ideas how to extract this field ?

Answer 1

Hi,

Here is a query that gets all such resources that have filter property in properties. Note that some resources do not have it if they are assigned directly to a resource instead of being dynamic scope. The filter is put into its own property.

maintenanceresources
| where bag_has_key(properties, 'filter')
| extend Filter = parse_json(tostring(properties.['filter']))

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.