Kusto/KQL — 18 Operations for AI Agents

KQL is how operators interrogate telemetry at cloud scale — Azure Monitor, Sentinel hunting, log analytics. act101 reads query pipelines as structure, so agents understand what a detection actually matches before they touch it.

This page is the canonical reference an AI coding agent uses to refactor, query, and analyze Kusto/KQL code through the act MCP server. 18 operations available: 0 refactor, 18 query, 0 analysis. Each operation is callable from Claude Code, Cursor, Codex, OpenCode, or any MCP-compatible agent host. Click any operation for a stable anchor link suitable for citation.

Query

18 query tools, the same on every supported language. Descriptions live in the shared reference: /docs/query-tools.

callers control_flow data_flow definition diagnostics effect_closure effect_summary fix_auto get_type graph import_organize interface mutations references repo_outline skeleton symbols symbols_batch