azure-kusto

Query and analyze Azure Data Explorer data using KQL.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/Avihai-H/infraops --skill azure-kusto-avihai-h
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-kusto
Source: https://github.com/Avihai-H/infraops/tree/main/.github/skills/azure-kusto
Command: npx skills add https://github.com/Avihai-H/infraops --skill azure-kusto-avihai-h

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires kusto, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides users with the ability to query and analyze vast amounts of data stored in Azure Data Explorer (Kusto), facilitating efficient log and telemetry data exploration and analysis.

Core Features & Use Cases

  • Query Execution: Perform KQL queries on large datasets for comprehensive data analysis.
  • Schema Exploration: Discover and analyze the structure of data within Kusto databases.
  • Resource Management: Manage Azure Data Explorer resources and monitor performance.
  • Use Case: For instance, run a query to find security incidents in an ADX cluster based on specific criteria like timestamp, severity level, or correlation ID.

Quick Start

Run a KQL query to analyze logs within your ADX cluster by providing the cluster name and the desired KQL query.

Frequently Asked Questions about azure-kusto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run KQL queries to analyze logs in Azure Data Explorer?

You can run KQL queries in Azure Data Explorer by providing the cluster name and desired query to analyze telemetry and log data. The Skill executes the query and returns results for comprehensive data analysis.

What do I need to access Kusto databases and explore schemas?

Accessing Kusto databases and exploring schemas requires an Azure subscription with configured ADX cluster permissions. This setup enables listing clusters, exploring database schemas, and querying telemetry data.

Can I use this to find security incidents in an ADX cluster?

Yes, you can find security incidents in an ADX cluster by executing KQL queries filtered by timestamp, severity level, or correlation ID. This allows targeted analysis of security logs within Azure Data Explorer.

How do I list Kusto clusters and databases in my Azure subscription?

List Kusto clusters and databases in your Azure subscription using built-in resource management capabilities. This discovers available ADX resources and facilitates schema exploration before executing data queries.

Does Azure Data Explorer work with Kusto Query Language for telemetry analysis?

Azure Data Explorer works with Kusto Query Language (KQL) to analyze telemetry data. KQL is required to query large datasets, explore database schemas, and manage log data within ADX clusters.

What are the limitations of using KQL for ADX data analytics?

Using KQL for ADX data analytics requires Azure subscription access and Kusto Query Language knowledge. Without proper cluster permissions or KQL syntax familiarity, querying telemetry logs and exploring schemas will fail.