Powered by Gemini 2.5 Flash

Write Azure KQL Queries
Without Leaving the Portal

A dedicated Chrome Extension sidebar that transforms your intent into precise KQL. No more tab-hopping or hunting for syntax errors - just Remix and go.

Built as a Chrome Extension SidebarKQLRemix operates directly within your browser as a unified sidebar, sitting perfectly alongside your Azure Portal workspace context.
Join the Waitlist
KQL REMIX
CONTEXT
0 found
No fields detected in Azure portal yet.
BASE QUERY
where message contains "TXNID123456"
OUTPUT
ContainerLogV2 | where message contains "TXNID123456" | where message contains "inbound" or message contains "outbound" | extend imageTag = tostring(split(ContainerImage, ":")[1]) | project TimeGenerated, PodName, Message, imageTag

From intent to runnable KQL

Start with the investigation you mean to run. KQLRemix turns it into a focused query you can review before using.

Before

Container debugging

Source table
ContainerLogV2
Intent

Show pod restarts and image versions from the last hour, grouped by pod.

After
ContainerLogV2
| where TimeGenerated > ago(1h)
| where LogMessage has_any ("restart", "back-off", "crash")
| extend imageTag = tostring(split(ContainerImage, ":")[1])
| summarize Restarts=count(), LatestLog=max(TimeGenerated) by PodName, ContainerName, imageTag
| order by Restarts desc

Built for Production Scale

A native-feeling sidebar that understands your data shapes and keeps your logs secure.

Intelligent Query Remix

Ask complex natural language questions like 'Find pod restarts last hour' and get production-ready Kusto Query Language (KQL) output instantly.

BYOK Privacy

Logs never touch our servers. Our Bring Your Own Key (BYOK) model ensures all processing happens locally in your browser.

Schema-Aware Context

KQLRemix automatically 'inhales' your visible workspace schema, ensuring all generated queries use your precise custom dimensions.

Verify Before You Commit

Side-by-side comparison lets you see the original base query and the remix before you run it, eliminating blind errors.

Works With

Focused support for the Azure experiences KQLRemix is being built around first.

Log Analytics Workspace

Remix workspace queries with visible schema context and familiar KQL operators.

Microsoft Sentinel

Empower security operations. Transform threat hunting intent into precise KQL queries across security events and operational data for enhanced threat detection in Azure.

Application Insights

Move from app error symptoms to usable exceptions and traces queries.

Built for Your Role

See real KQL examples and learn best practices for your specific Azure surface.

Threat Hunting

Master SecurityEvent queries. Learn patterns for detecting threats, failed logons, and privilege escalation in Azure Sentinel.

Error Debugging

Debug faster in Application Insights. Correlate exceptions with traces and pinpoint root causes across your stack.

Infrastructure

Stay on-call ready. Monitor container health, track pod restarts, and correlate CPU and memory spikes.

View full KQL reference →

Frequently Asked Questions

Everything you need to know about KQLRemix.

Safety first! Since KQL Remix is a BYOK (Bring Your Own Key) model, your API key is stored locally within your browser's secure storage. It is never sent to our servers or shared with anyone else. The key is only used to authenticate your direct requests to Google's Gemini API.

Not if we can help it. The "Remix" philosophy is additive. The extension is designed to take your existing query as context and append the necessary operators (like | where, | summarize, or | project) based on your intent. While we always recommend a quick copy-paste backup for massive queries, the goal is to enhance your work, not replace it.

In the world of coding assistants, speed is king. Gemini 2.5 Flash is optimized for high-frequency, low-latency tasks. It provides the "instant" generation you need to stay in your flow state without waiting 10 seconds for a response, while still being more than capable of handling complex KQL logic and table schemas.

No. The extension only processes the metadata you provide: the KQL query structure you've written and the "Intent" text you type in. It does not scan your actual database rows or private organizational data. It sees the labels and logic, not the secrets.

Because this is a BYOK extension, errors are usually tied to the API key or quota. Please check that: - Your Google AI Studio/Vertex AI key is active. - You haven't hit your rate limits for the Gemini 2.5 Flash tier. - You have an active internet connection.

Gemini cost estimate

KQLRemix is designed for short, schema-aware prompts. With Gemini 2.5 Flash pricing, a typical query remix should cost under $0.001 when using your own API key.

View Gemini API pricing

Join the Future of Cloud Investigation.

Leave your email and join the waitlist, and we'll reach out when the early access is ready for you.