Query Azure Resource Graph
azure_resource_graph_queryRun KQL queries against Azure Resource Graph to search resources, track changes, and assess health across subscriptions.
Instructions
Runs a KQL query against Azure Resource Graph: a fast, read-only index of every resource across your subscriptions. Useful tables: resources, resourcecontainers (subscriptions and resource groups), resourcechanges (recent property changes), healthresources (availability), advisorresources, policyresources. Examples: "resources | where type =~ 'microsoft.web/sites' | summarize count() by location"; "resourcechanges | where properties.changeAttributes.timestamp > ago(1d) | project properties.targetResourceId, properties.changeType, properties.changes | take 20". Use azure_find_resources for simple lookups.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | Maximum rows (default 100). | |
| query | Yes | KQL query. | |
| skipToken | No | Continuation token from a previous call, to fetch the next page. | |
| subscriptionIds | No | Subscription IDs to search. Omit to search every subscription you have access to. | |
| managementGroupIds | No | Management group IDs to query instead of subscriptions. |