Brilliant, thanks so much everone for your responses! I went with; | spath path=custom_fields{1} | rename _raw AS temp | rename custom_fields{1} AS _raw | spath | rename temp AS _raw | table alertrule, value in the end which gave me exactly what i needed. Thanks again!!
... View more