AzureDataExplorer

Use the Azure Data Explorer integration to collect and analyze data inside Azure Data Explorer clusters, and to manage search queries.

Analytics & SIEM · Azure Data Explorer

Configuration parameters

  • cluster_url — Cluster URL (e.g. https://help.kusto.windows.net) (required)
  • client_id — Application ID (required)
  • client_activity_prefix — Client Activity Prefix (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • authentication_type — Authentication Type (required)
  • tenant_id — Tenant ID
  • credentials — Client Secret
  • redirect_uri — Application redirect URI
  • auth_code — Authorization code

Commands (9)

  • azure-data-explorer-auth-complete

    Run this command to complete the authorization process. This should be used after running the azure-data-explorer-auth-start command.

  • azure-data-explorer-auth-reset

    Run this command if for some reason you need to rerun the authentication process.

  • azure-data-explorer-auth-start

    Run this command to start the authorization process and follow the instructions in the command results.

  • azure-data-explorer-auth-test

    Run this command to test the connectivity to Azure Data Explorer.

  • azure-data-explorer-generate-login-url

    Generate the login url used for Authorization code flow.

  • azure-data-explorer-running-search-query-cancel

    Starts a best-effort attempt to cancel a specific running search query in the specified database.

  • azure-data-explorer-running-search-query-list

    List currently executing search queries in the given database. A database admin or database monitor can see any search query that was invoked on their database. Other users can only see search queries that they themselves invoked.

  • azure-data-explorer-search-query-execute

    Execute a Kusto Query Language (KQL) query against the given database inside a cluster. The Kusto query is a read-only request to process data and return results. To learn more about KQL go to https://docs.microsoft.com/en-us/azure/kusto/query/.

  • azure-data-explorer-search-query-list

    List search queries that have reached a final state in the given database. A database admin or database monitor can see any command that was invoked on their database. Other users can only see queries that they themselves invoked.