CrowdStrike data

[piearesquared]

I'm looking to build a Power BI dashboard for a number of different tools, one of which is CrowdStrike. For CrowdStrike data, I would like details such as Alert Name, Severity, Time and most importantly, who is currently assigned to the ticket (if anyone). I'm using the endpoint /alerts/queries/alerts/v2. I worked with CrowdStrike support and confirmed the "assigned_to_name" field is what we're looking for. However, the field only shows up if someone is assigned to it, if nobody is assigned, the field is not present (not even in the null state).

When testing, I assigned myself an alert, and the field shows up.. however, the rest of the alerts give an error, almost as if it doesn't know how to ingest the rest of the alerts now that the "assigned_to_name" field is now present.

Is there a way to get this field to always show up, even if nobody is assigned to it? Maybe a permanent column I can have this field/data populate in?

TIA

[lbendlin · Accepted solution]

Read about the way Power Query can handle missing columns. Then design your query accordingly so it can work in both scenarios.

[piearesquared]

Thank you. Any documents that can aid in this reading?

[lbendlin · Accepted solution]

Chris Webb's BI Blog: Handling Added Or Missing Columns In Power Query (crossjoin.co.uk)

[lbendlin · Accepted solution]

Read about the way Power Query can handle missing columns. Then design your query accordingly so it can work in both scenarios.