如何从 aws athena 的下表中获取嵌套的 json 值

Question

Here is our code

SELECT "count"(*) "count"
    , "httprequest"."country"
    , "httprequest"."headers"
FROM waf_logs_17
WHERE ("httprequest"."uri" LIKE '/login')
GROUP BY "httprequest"."clientip", "httprequest"."country","httprequest"."headers"
ORDER BY "count" limit 5

Result is as follow

count	Country	headers
1	US	[{name=Host, value=app.onlinecheckwriter.com}, {name=X-Forwarded-For, value=75.113.195.00}, {name=X-Forwarded-Proto, value=https}]

Now question is how we can select the value of X-Forwarded-For under "httprequest"."headers"

Answer 1

Your data is not json, but array of rows, so you can process it using array functions :

-- sample data
WITH dataset (headers) AS (
    values (array[cast(row('X-Forwarded-For', '75.113.195.00') as ROW(name varchar, value varchar))] )
)

-- query
select 
    reduce(headers, NULL, (v, curr) -> if(curr.name = 'X-Forwarded-For', curr.value, v), v -> v)
from dataset

Output:

_col0
75.113.195.00