Localized reading guide
azure-kusto-graphPurpose, usage and source
Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN: make-graph, graph-match, graph-shortest-paths, graph-to-table, graph-mark-components, persistent graph, graph model, graph snapshot, build a graph from data, find paths between nodes, pattern matching in graph, connected components, transient graph, Kusto graph, KQL graph.
Source retrieved:
- Source repository
- microsoft/skills
- SKILL.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/SKILL.md- Repository stars
- 3,157
- Repository updated
- 2026-10-31
- Categories
- Cloud
- Last collected
License: License file needs review
Workflow excerpts are reading aids, not executable instructions from Codez. No third-party Skill was run to produce this page.
The purpose and workflow passages below are upstream material, organized and translated for reading. They are distinct from the separately labeled Codez editorial analysis.
What this Skill does
Build and query Kusto graphs from natural language. Covers transient graphs (make-graph), persistent graph models/snapshots, pattern matching (graph-match), shortest paths, connected components, and graph-to-table export. Generates the edges-first thinking: define edges, define node lookups, union, make-graph. WHEN: make-graph, graph-match, graph-shortest-paths, graph-to-table, graph-mark-components, persistent graph, graph model, graph snapshot, build a graph from data, find paths between nodes, pattern matching in graph, connected components, transient graph, Kusto graph, KQL graph.
How the upstream workflow works
Practical Usage Scenarios
See references/SCENARIOS.md for full worked examples including: Reachability analysis (shortest paths to critical assets) Network segmentation validation (connected components) Blast radius of compromised accounts (variable-length path matching)
Upstream passage · L414 ↗Kusto Graph Semantics
Build transient and persistent graphs from tabular data using KQL graph operators. This skill translates natural language into the edges-first graph construction pattern and graph query operators.
Upstream passage · L10 ↗Activation Triggers
Use this skill when the user: Wants to build a graph from tabular data (make-graph)
1. Define your EDGES -> src --> dest, with relationship type/properties
2. Define your NODE LOOKUPS -> display names, types, properties for each node ID
3. Union edge types -> if you have multiple relationship types
4. Union node lookups -> if you have multiple node types
5. Call make-graph -> edges | make-graph Source --> Target with nodes on nodeIdRequirements and setup
No short requirements passage was selected from this file. This does not mean the Skill has no dependencies. Check the repository setup instructions and referenced files.
Limits and quality checks
No separate limits passage was selected from this file. This does not mean the Skill is safe for every input or environment. Review the complete source and validate your own result.
Start with a safe trial
- Check the supported host and the repository installation instructions. Keep the Skill directory and its referenced scripts, assets and documentation together; SKILL.md alone may omit dependencies.
- Give the agent your real input, desired output and acceptance criteria. Invocation syntax and available tools depend on the host; this site does not assume a universal install command.
- Try the source workflow in a disposable project or on a copy. Review operations that change files, remote services or billable resources before allowing them.
- Validate the output against the source quality checks and your own requirements. A successful trigger or a high repository Star count does not establish a correct result.
Read further in the source
- Kusto Graph Semantics
- Activation Triggers
- The Edges-First Approach
make-graph-- Build a graph from tablesgraph-match-- Find patternsgraph-shortest-paths-- Find shortest pathsgraph-mark-components-- Find connected components- Transient Graphs
- Persistent Graphs
- Management commands
- Visualize in Kusto Explorer
- Using with IRQL
- Example: IRQL selectors -> make-graph -> shortest path
- Example: IRQL selectors -> make-graph -> connected components
- Example: IRQL + make-graph integration
- Practical Usage Scenarios
- Opening Queries in Kusto Explorer (Windows Only)
- Default: Output KQL in Chat
- Optional: Save and Launch
Related Skills
Translation and scope
This reading guide selects passages from the pinned upstream SKILL.md. Translation is assisted. It is not a complete manual or a claim of tested compatibility. Read the original and its referenced files before use.
This introduction refers to the pinned version below; current repository activity and collection time are shown separately.
- Pinned source
- Read the original ↗
- Source retrieved
- Source commit
00d66a64919edca5bca2c673373444e36a4b5461- Source SHA-256
6878ae49f9bdc1ed9ada3ef9c59e83450bc96751da73d44c4bfe5a1a47e14bde