SecurityAlert | extend Entities = iff(isempty(Entities), todynamic('[{"dummy" : ""}]'), todynamic(Entities)) | mvexpand Entities | evaluate bag_unpack(Entities, "Entity_") | extend Entity_Type = columnifexists("Entity_Type", "") | extend Entity_Name = columnifexists("Entity_Name"...