Agent skill

Apex Azure Kusto

by jonathan-vella in jonathan-vella/apex

ANALYSIS SKILL — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL.

Install Apex Azure Kusto

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/apex-azure-kusto .claude/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .claude/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.github/skills/apex-azure-kusto .agents/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .agents/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.github/skills/apex-azure-kusto .cursor/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .cursor/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/jonathan-vella/apex.git --path .github/skills/apex-azure-kusto

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.github/skills/apex-azure-kusto .gemini/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .gemini/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .github/skills && cp -r skills-src/.github/skills/apex-azure-kusto .github/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .github/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add jonathan-vella/apex --skill apex-azure-kusto -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install jonathan-vella/apex apex-azure-kusto --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.github/skills/apex-azure-kusto .opencode/skills/apex-azure-kusto && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "apex-azure-kusto" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-kusto into .opencode/skills/apex-azure-kusto/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-kusto", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: apex-azure-kusto
GitHub stars: 217
Token cost: ~984 tokens
SKILL.md length: 298 words
Files: 4 (incl. references)
Skills in repo: 39
Repo updated: Oct 10, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

ANALYSIS SKILL — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL.

Works in 4 steps: Discover resources — list clusters and… → Explore schema — kusto_table_schema_get… → Query data — kusto_query with a KQL… → …
: App Insights / Log Analytics troubleshooting (apex-azure-diagnostics)
SKILL.md covers Prerequisites, Steps, Query Patterns Quick Reference and Rules, plus 2 more sections
Calls az

What it does

Apex Azure Kusto is an agent skill from jonathan-vella/apex. ANALYSIS SKILL — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL. WHEN: "KQL queries", "Kusto database queries", "Azure Data Explorer", "ADX clusters", "time series data", "IoT telemetry", "anomaly detection". DO NOT USE FOR: App Insights / Log Analytics troubleshooting (apex-azure-diagnostics), cost analysis (apex-azure-cost-optimization).

Its SKILL.md is about 980 tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files, including reference files (for example `references/common-issues.md`, `references/fallback-strategy.md` and `references/query-patterns.md`).

It sits in Data & Analytics, covering Forecasting and time series, Data analysis and Anomaly detection. It works with Microsoft Azure, Microsoft Sentinel and Model Context Protocol. The repository describes itself as: APEX turns Azure platform engineering requirements into verified, deploy-ready IaC — powered by GitHub Copilot agents, real-time pricing, and built-in compliance. The licence is MIT.

When your agent uses it

: App Insights / Log Analytics troubleshooting (apex-azure-diagnostics)
Cost analysis (apex-azure-cost-optimization)

Example prompts

“KQL queries”
“Kusto database queries”
“Azure Data Explorer”
“/apex-azure-kusto”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

Discover resources — list clusters and databases in the subscription
Explore schema — kusto_table_schema_get for table structure
Query data — kusto_query with a KQL expression
Analyse results — aggregate, visualise, export

What it can do on your machine

Read from SKILL.md and the folder at commit b8e5908. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
- az
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use az, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Apex Azure Kusto loads about 984 tokens when it runs, and up to ~2.6k if it reads all its reference files. Until then it costs about 96 tokens; SKILL.md has 298 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~96
When it runs · the whole SKILL.md, loaded when a task matches: ~984
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~2.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jonathan-vella/apex at commit b8e5908, republished under its MIT licence (© jonathan-vella). 298 words, ~984 tokens.

Download SKILL.mdSave it as .claude/skills/apex-azure-kusto/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.

name: apex-azure-kusto
description: **ANALYSIS SKILL** — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL. WHEN: "KQL queries", "Kusto database queries", "Azure Data Explorer", "ADX clusters", "time series data", "IoT telemetry", "anomaly detection". DO NOT USE FOR: App Insights / Log Analytics troubleshooting (apex-azure-diagnostics), cost analysis (apex-azure-cost-optimization).
user-invocable: true
disable-model-invocation: false
argument-hint: cluster, database and query goal
license: MIT
metadata.author: Microsoft
metadata.version: 1.0.1

Azure Data Explorer (Kusto) Query & Analytics

Execute KQL queries against Azure Data Explorer for fast, scalable big-data analytics on log, telemetry, and time-series data.

Prerequisites

Azure CLI authenticated (az login) with a subscription containing Kusto resources
RBAC: AllDatabasesViewer on the cluster, or Database Viewer per database
Azure MCP server configured in .vscode/mcp.json for the mcp_azure-mcp_kusto namespace; CLI fallback in references/fallback-strategy.md

Steps

Discover resources — list clusters and databases in the subscription
Explore schema — kusto_table_schema_get for table structure
Query data — kusto_query with a KQL expression
Analyse results — aggregate, visualise, export

Query Patterns Quick Reference

Pattern	Use For
Basic Data Retrieval	Quick inspection, recent events
Aggregation Analysis	Counting, distribution, top-N
Time Series Analytics	Performance monitoring, trends
Join and Correlation	Root-cause analysis, event tracing
Schema Discovery	Data model exploration

For full KQL syntax, examples, best practices, and performance tips, read references/query-patterns.md.

Rules

Always bound time-series scans with start/end timestamps, including both join inputs
Use take/limit for exploratory queries
Filter early (where before join / summarize)
Use summarize for aggregations; bin() for time bucketing
Use project to select only needed columns

MCP Tools

These names are capability hints, not proof of installation. Inspect available tools and their current schemas before use; do not invent a missing tool or silently substitute ARG/Monitor for ADX execution.

Tool	Purpose
`kusto_cluster_list`	List Kusto clusters in a subscription
`kusto_database_list`	List databases in a cluster
`kusto_query`	Execute KQL against a database
`kusto_table_schema_get`	Retrieve table schema

Required parameters: subscription, cluster, database, query (or table). Optional: resource-group, tenant.

For CLI fallback (timeouts, auth failures), read references/fallback-strategy.md. For access, timeout, empty-result and ingestion problems, read references/common-issues.md.

Reference Index

Reference	When to Load
`references/query-patterns.md`	KQL patterns, examples, best practices, common functions
`references/fallback-strategy.md`	CLI commands and REST API fallback when MCP tools fail
`references/common-issues.md`	Access, timeout, syntax, empty-result and ingestion issues

Files

SKILL.md and 3 other files (references) in .github/skills/apex-azure-kusto of jonathan-vella/apex.

SKILL.md
references/common-issues.md
references/fallback-strategy.md
references/query-patterns.md

Open the folder on GitHubat commit b8e5908

Compare with similar skills

Apex Azure Kusto next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Apex Azure Kusto compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Apex Azure Kusto this skilljonathan-vella/apex	217	—	~984	Automated safety check: Pass	MIT	yesterday
Kqlmicrosoft/fabric-rti-mcp	131	—	~6.2k	Automated safety check: Pass	MIT	10 days ago
Azure Kustomicrosoft/GitHub-Copilot-for-Azure	255	1 repos	~2.1k	Automated safety check: Pass	MIT	yesterday
Kqlmicrosoft/skills	3.1k	—	~4.7k	Automated safety check: Pass	MIT	yesterday
Kql Query AuthoringSCStelz/security-investigator	249	—	~5.7k	Automated safety check: Pass	MIT	2 days ago
Azure AI Anomalydetector Javamicrosoft/skills	3.1k	5 repos	~2.3k	Automated safety check: Pass	MIT	yesterday

Similar skills

Kql
microsoft/fabric-rti-mcp
Official
KQL language expertise for writing correct, efficient Kusto queries using the Fabric RTI MCP tools.
131 GitHub stars~6.2k tokensUpdated 10 days ago
Data & AnalyticsAuto-check passed
Azure Kusto
microsoft/GitHub-Copilot-for-Azure
Official
Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis.
255 GitHub starsUsed in 1 repo~2.1k tokens
Data & AnalyticsAuto-check passed
Kql
microsoft/skills
Official
KQL language expertise for writing correct, efficient Kusto Query Language queries.
3.1k GitHub stars~4.7k tokensUpdated yesterday
Data & AnalyticsAuto-check passed
Kql Query Authoring
SCStelz/security-investigator
A skill your agent uses when asked to write, create, or help with KQL (Kusto Query Language) queries for Microsoft Sentinel, Defender XDR, or Azure Data Explorer.
249 GitHub stars~5.7k tokensUpdated 2 days ago
Data & AnalyticsAuto-check passed
Azure AI Anomalydetector Java
microsoft/skills
Official
Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java.
3.1k GitHub starsUsed in 5 repos~2.3k tokens
Data & AnalyticsAuto-check passed
Analyzing Cloud Storage Access Patterns
mukul975/Anthropic-Cybersecurity-Skills
Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics for after-hours bulk downloads, new-IP access, and…
34k GitHub stars~599 tokensUpdated 1 mo ago
Data & AnalyticsAuto-check passed

Questions about Apex Azure Kusto

What does Apex Azure Kusto do?

ANALYSIS SKILL — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL. Apex Azure Kusto is an agent skill from jonathan-vella/apex. ANALYSIS SKILL — Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL.

When should I use Apex Azure Kusto?

Apex Azure Kusto fits situations like: : App Insights / Log Analytics troubleshooting (apex-azure-diagnostics); cost analysis (apex-azure-cost-optimization).

How do I install Apex Azure Kusto in Claude Code?

Run `npx skills add jonathan-vella/apex --skill apex-azure-kusto -a claude-code`. Or copy the skill folder (.github/skills/apex-azure-kusto in jonathan-vella/apex) into .claude/skills/apex-azure-kusto in your project. Claude Code loads it when a task matches its description.

How do I install Apex Azure Kusto in Codex?

Run `npx skills add jonathan-vella/apex --skill apex-azure-kusto -a codex`. Or copy the skill folder (.github/skills/apex-azure-kusto in jonathan-vella/apex) into .agents/skills/apex-azure-kusto in your project. Codex loads it when a task matches its description.

Can I use Apex Azure Kusto in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jonathan-vella/apex --skill apex-azure-kusto -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/apex-azure-kusto, .gemini/skills/apex-azure-kusto, .github/skills/apex-azure-kusto and .opencode/skills/apex-azure-kusto in your project.

What does Apex Azure Kusto need to run?

Going by SKILL.md and its folder, Apex Azure Kusto needs the command-line tools its instructions call (az).

Does Apex Azure Kusto access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Apex Azure Kusto safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Apex Azure Kusto use?

Apex Azure Kusto is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Apex Azure Kusto use?

About 984 tokens (SKILL.md is roughly 3.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.6k tokens, read only when the agent opens those files.

What are the alternatives to Apex Azure Kusto?

Skills that share tags, products or a category with Apex Azure Kusto: Kql (microsoft/fabric-rti-mcp, 131 stars), Azure Kusto (microsoft/GitHub-Copilot-for-Azure, 255 stars), Kql (microsoft/skills, 3.1k stars) and Kql Query Authoring (SCStelz/security-investigator, 249 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Apex Azure Kusto?

jonathan-vella (a GitHub user) maintains it in jonathan-vella/apex, which has 217 GitHub stars. The repository holds 39 skills in this directory. The repository was last updated on October 10, 2026.

Source: jonathan-vella/apex on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Apex Azure Kusto

Install Apex Azure Kusto

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Azure Data Explorer (Kusto) Query & Analytics

Prerequisites

Steps

Query Patterns Quick Reference

Rules

MCP Tools

Reference Index

Files

Compare with similar skills

Similar skills

Kql

Azure Kusto

Kql

Kql Query Authoring

Azure AI Anomalydetector Java

Analyzing Cloud Storage Access Patterns

More from jonathan-vella/apex

Apex Azure Diagnostics

Apex Azure Governance Discovery

Apex Context Management

Apex Python Diagrams

Apex Terraform Search Import

Apex Vendor Prompting

Questions about Apex Azure Kusto

Install Apex Azure Kusto

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Azure Data Explorer (Kusto) Query & Analytics

Prerequisites

Steps

Query Patterns Quick Reference

Rules

MCP Tools

Reference Index

Files

Compare with similar skills

Similar skills

More from jonathan-vella/apex

Related

Questions about Apex Azure Kusto