KQL Search

This query is designed to identify and list Azure DevOps projects and repositories by extracting relevant information from a dataset. Here's a simple breakdown of what the query does:

1. Data Source: It starts by accessing a dataset called ExposureGraphNodes.

2. Filter: It filters the data to only include nodes labeled as azuredevopsrepository, which represents Azure DevOps repositories.

3. Extract Information:

   • It extracts two pieces of information from a field called EntityIds:
     • Subscription: The first element's id.
     • URL: The second element's id.

4. Parse Subscription Details:

   • It parses the Subscription field to extract detailed information such as:
     • subscription_id: The unique identifier for the Azure subscription.
     • resource_group: The resource group within the subscription.
     • azure_devops_org: The Azure DevOps organization.
     • project_name: The name of the project.
     • repo_name: The name of the repository.

5. Output: Finally, it selects and displays the following columns:

   • NodeName: The name of the node.
   • Subscription: The subscription information.
   • URL: The URL associated with the repository.
   • subscription_id: The subscription ID.
   • resource_group: The resource group name.
   • azure_devops_org: The Azure DevOps organization name.
   • project_name: The project name.
   • repo_name: The repository name.

In summary, this query helps you identify and gather detailed information about Azure DevOps projects and repositories from a specific dataset.