GitHub

This guide explains how to use GitHub features with sKaleQL, including setting up authentication, running workflows, and accessing query results through GitHub Actions.

Table of Contents

• Using This Template
• Setting Secret Values
• Executing KQL Queries
• Viewing Query Results
• Downloading Artifacts

Using This Template

To create a new repository using this template:

1. Navigate to the kql-template-repo repository.
2. Click Use this template.
3. Select Create a new repository.

Setting Secret Values

To configure the necessary secrets for the repository, set the following values:

• AZURE_CLIENT_ID: Client ID of the Service Principal.
• AZURE_SUBSCRIPTION_ID: Subscription ID containing the Log Analytics Workspace.
• AZURE_TENANT_ID: Tenant ID of the Service Principal.
• WORKSPACE_ID: ID of the Log Analytics Workspace.

Steps to set secrets

1. Navigate to Settings > Secrets and variables > Actions.
2. Click New repository secret.
3. Enter the name and value of the secret.
4. Click Add secret.

Executing KQL Queries

1. Go to the Actions tab and select the execute-queries workflow.
2. Click Run workflow.
3. Enter the folder containing the KQL queries relative to library (e.g., device).
4. Click Run workflow.

Viewing Query Results

1. Click on the workflow run to view the details.
2. Click on the Execute queries in job.
3. Click on the Execute queries step.

Downloading Artifacts

1. Go to the workflow run.
2. Under Artifacts, click on Query-Results.

Next Steps

With your GitHub setup complete, you can now familiarize yourself with the configuration options.