KQL Library / Health Checks
Health Checks
Meta-queries about the workspace itself — is your detection stack actually working, and what's it firing on?
-
Analytics Rule Health
analytics-rule-health.kqlAnalytics Rules that ran successfully in the last 90 days but never produced an alert — candidates for review or tuning.
-
Top 10 Alerts
top-10-alerts.kqlTop 10 alert names over 90 days with percentage of total and color-coded impact level (High / Moderate / Low).