getschema operator
Produce a table that represents a tabular schema of the input.
events | summarize MyCount=count() by field_name | getschema
Syntax
T |
getschema
Example
events
| project original_time, data_source_name, name
| getschema
Results
ColumnName | ColumnOrdinal | DataType | ColumnType | Description |
---|---|---|---|---|
original_time | 0 | long | timestamp_t | Original Time. |
data_source_name | 1 | string | string_t | data_source_name produced by function lookup |
name | 2 | string | string_t | Name. |