Skip to main content

Cyware Orchestrate

Microsoft Kusto Query

Microsoft Kusto Query is a read-only request to process data and return results. You can use Kusto Query to explore the data after creating tables and ingesting data using the Kusto Data Explorer. The Orchestrate app is used to connect to an instance of Microsoft Data Explorer and perform a particular KQL query on a database.

The Microsoft Kusto Query app is configured with the Orchestrate application to perform the below-listed actions:

Action Name

Description

Query Database

This action can be used to perform a KQL query on the Microsoft Kusto database.

Configuration parameters

Below is the list of configuration parameters that are required for the Microsoft Kusto Query app to communicate with the Microsoft Kusto Query application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Cluster Name

Enter the Microsoft Cluster name.

Text

Required

Cluster URL

Enter the complete Cluster URL.

Text

Required

Client ID

Enter the Microsoft azure Client Id.

Text

Required

Client Secret

Enter the Microsoft azure client secret.

Text

Required

Authority ID

Enter the authority id a.k.a Tenant ID.

Text

Required

Action: Query Database

This action can be used to perform a KQL query on the Microsoft Kusto database.

Input parameters

Parameter

Description

Field Type

Required / Optional

Comments

Query

Enter the KQL query you want to run.

Text

Required

Database Name

Enter the Database name in which the table exists.

Text

Required

 

Example Request
[
    {
        "query": "cykusto_table",
        "database_name": "cykusto_db"
    }
]