$ loading_
Query Fabric Eventhouse data, analyze time series, and monitor ingestion health.
This skill appears to be a prompt-driven helper for read-only KQL queries against Fabric Eventhouse via CLI/REST, and it comes from a Microsoft-hosted open-source GitHub repository, so overall risk is relatively low. Caution is still warranted because it relies on existing Azure/Fabric identity context, triggers network calls, and includes extra README instructions such as mandatory update checks / invoking another skill.
The material does not require a separate API key or environment variable, but the README explicitly mentions authentication and token acquisition, including `az rest`, Fabric tokens, and `storage.azure.com` tokens. This implies reuse of the current Azure CLI login/session or access tokens. No explicit credential harvesting or exfiltration is described, but it should be treated as touching sensitive identity context.
The description clearly states that it uses `az rest` against the Kusto REST API, so it makes remote requests to Fabric/Eventhouse and may also perform update checks. Although no fixed host is listed in the metadata and such connectivity is normal for the stated purpose, user queries and results may be transmitted to relevant Azure/Fabric service endpoints.
This is a prompt-only skill rather than a bundled executable, but the documentation clearly directs the local use of CLI commands such as `az rest` and asks the user to invoke a `check-updates` skill or compare local/remote versions on first use. That falls under normal local command-execution behavior; the extra cross-skill update-check instruction should be manually reviewed before following.
The material states read-only KQL queries, schema discovery, ingestion monitoring, and JSON export, indicating access to Eventhouse/KQL Database query results, table schema, workspace data, and item metadata. No write or modification capability is declared, but the visible data scope depends on the Azure/Fabric permissions of the current identity.
The source is a Microsoft GitHub open-source repository with some community adoption (420 stars), which are clear risk-reducing signals; being prompt-only also makes it more auditable than a closed binary. Still, the license is undeclared, maintenance status is unknown, and the README contains behavior-shaping instructions such as 'mandatory' and 'invoke another skill first', so a conservative review is advisable from both supply-chain and prompt-injection perspectives.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "eventhouse-consumption-cli" skill from askskill: 1. Download https://raw.githubusercontent.com/microsoft/skills-for-fabric/main/skills/eventhouse-consumption-cli/SKILL.md 2. Save it as ~/.claude/skills/eventhouse-consumption-cli/SKILL.md 3. Reload skills and tell me it's ready
Write a read-only KQL query for Fabric Eventhouse that counts error logs in the last hour grouped into 5-minute bins, and return results suitable for JSON export.
An executable KQL query using where, summarize, and bin() to show error trends, plus guidance for exporting results to JSON.
Help me list tables in Eventhouse and provide queries to inspect a specific table's schema, column types, and related metadata.
KQL or REST call examples for .show tables and schema discovery to quickly understand how data is organized.
Give me a set of queries to check whether Eventhouse ingestion is healthy and to inspect currently active KQL queries.
A set of operations-focused query examples to verify ingestion status, detect issues, and observe active query activity.
Update Check — ONCE PER SESSION (mandatory) The first time this skill is used in a session, run the check-updates skill before proceeding.
- GitHub Copilot CLI / VS Code: invoke the
check-updatesskill.- Claude Code / Cowork / Cursor / Windsurf / Codex: compare local vs remote package.json version.
- Skip if the check was already performed earlier in this session.
CRITICAL NOTES
- To find the workspace details (including its ID) from workspace name: list all workspaces and, then, use JMESPath filtering
- To find the item details (including its ID) from workspace ID, item type, and item name: list all items of that type in that workspace and, then, use JMESPath filtering
| Task | Reference | Notes |
|---|---|---|
| Finding Workspaces and Items in Fabric | COMMON-CLI.md § Finding Workspaces and Items in Fabric | Mandatory — READ link first [needed for finding workspace id by its name or item id by its name, item type, and workspace id] |
| Fabric Topology & Key Concepts | COMMON-CORE.md § Fabric Topology & Key Concepts | |
| Environment URLs | COMMON-CORE.md § Environment URLs | KQL Cluster URI is per-item |
| Authentication & Token Acquisition | COMMON-CORE.md § Authentication & Token Acquisition | Wrong audience = 401; read before any auth issue |
| Core Control-Plane REST APIs | COMMON-CORE.md § Core Control-Plane REST APIs | |
| Pagination | COMMON-CORE.md § Pagination | |
| Long-Running Operations (LRO) | COMMON-CORE.md § Long-Running Operations (LRO) | |
| Rate Limiting & Throttling | COMMON-CORE.md § Rate Limiting & Throttling | |
| OneLake Data Access | COMMON-CORE.md § OneLake Data Access | Requires storage.azure.com token, not Fabric token |
| Job Execution | COMMON-CORE.md § Job Execution | |
| Capacity Management | COMMON-CORE.md § Capacity Management | |
| Gotchas & Troubleshooting | COMMON-CORE.md § Gotchas & Troubleshooting | |
| Best Practices | COMMON-CORE.md § Best Practices | |
| Tool Selection Rationale | COMMON-CLI.md § Tool Selection Rationale | |
| Authentication Recipes | COMMON-CLI.md § Authentication Recipes | az login flows and token acquisition |
Fabric Control-Plane API via az rest | COMMON-CLI.md § Fabric Control-Plane API via az rest | Always pass --resource https://api.fabric.microsoft.com or az rest fails |
| Pagination Pattern | COMMON-CLI.md § Pagination Pattern | |
| Long-Running Operations (LRO) Pattern | COMMON-CLI.md § Long-Running Operations (LRO) Pattern | |
OneLake Data Access via curl | COMMON-CLI.md § OneLake Data Access via curl | Use curl not az rest (different token audience) |
| Job Execution (CLI) | COMMON-CLI.md § Job Execution | |
| OneLake Shortcuts | COMMON-CLI.md § OneLake Shortcuts |
…
Build end-to-end Bronze, Silver, and Gold lakehouse pipelines in Microsoft Fabric.
Create, update, and publish Microsoft Fabric Eventstream topologies via REST APIs.
Migrate HDInsight Spark, Hive, and Oozie workloads to Microsoft Fabric.
Search Microsoft Fabric items across workspaces and return locations and IDs.
Create, edit, deploy, and optimize Power BI semantic models and DAX.
Scan, assess, and upgrade Power BI Gen1 dataflows into Gen2.1 copies.
List, inspect, and validate Microsoft Fabric Eventstream topology and configuration.
Query and analyze logs, telemetry, and time-series data in Azure Data Explorer.
Run read-only T-SQL queries on Fabric warehouse and lakehouse data.
Analyze Fabric warehouse performance via CLI and get optimization recommendations.
Generate and run KQL from natural language with schema discovery for Azure Data Explorer.
Query, manage, and inspect ClickHouse databases directly through an AI assistant.