Skip to content

PowerShell Module that extracts data from Microsoft Azure using ARG KQL queries running in PowerShell. The extracted data can be exported to CSV, Excel, JSON reports, mitigating the maximum rows limitation of ARG Explorer on Azure.

License

Notifications You must be signed in to change notification settings

N372unn32/AzureKQLPowerShellExtractor

Repository files navigation

AzureKQLPowerShellExtractor

This PowerShell module allows you to extract data from Microsoft Azure using ARG KQL Queries running via PowerShell.

The extracted data can be exported in JSON, CSV or Excel format.

This module helps mitigate the export limitation of 51000 rows at a time in ARG Explorer when ARG KQL Queries are executed on Azure Portal.

For large output, the module has mitigations in place for throttling.

References

Description Link
Brief Documetation Medium Blog

Requirements

PowerShell Core

Azure PowerShell module

Import-Excel PowerShell module

Steps

Using PowerShell Core



#Import the PowerShell Module after cloning the repository
Import-Module .\AzureKQLPowerShellExtractor.psm1 -Force -Verbose

# run " Get-AzureKQLPowerShellExtract -h " for help and examples

# Call the Get-AzureKQLPowerShellExtract command and supply necessary arguments

# Replace ".\sample.kql" with the path to your ARG KQL Query. Simply create a text file with your KQL query as its content, e.g., sample.kql

Get-AzureKQLPowerShellExtract -kqlQueryPath .\sample.kql -inCSV


About

PowerShell Module that extracts data from Microsoft Azure using ARG KQL queries running in PowerShell. The extracted data can be exported to CSV, Excel, JSON reports, mitigating the maximum rows limitation of ARG Explorer on Azure.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published