use UQL and jsonata
parse-json | jsonata "schema.meta.custom.data.monitors" | extend "start"=unixtime_seconds_todatetime("create_datetime") | project "type","start", "friendly_name"