skills.rest
crystalzhangbai
crystalzhangbaiCOMMUNITY
Explore all skills by this author →
GitHub

b01

Provides KQL, MDM, and DGrep queries for troubleshooting Azure Networking resources.

Updated Aug 13, 2026
Search Tags:#troubleshooting#kql#azure networking#kusto#network diagnostics#geneva mdm#dgrep
One-click install
npx skills add https://github.com/crystalzhangbai/TS-Agent-Azure --skill b01-crystalzhangbai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: b01
Source: https://github.com/crystalzhangbai/TS-Agent-Azure/tree/main/bridge/naniteagent-playground/naniteagent/skills/b01
Command: npx skills add https://github.com/crystalzhangbai/TS-Agent-Azure --skill b01-crystalzhangbai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Diagnosing Azure Networking incidents requires knowing hundreds of internal Kusto clusters, tables, and Geneva dashboards; this Skill supplies 563+ production-ready KQL, MDM, and DGrep queries from the B01 Dashboard so engineers can troubleshoot without memorizing data sources. ## Core Features & Use Cases - Ready-to-run KQL queries: Covers VM/host networking (VFP drops, AccelNet, FPGA/GFT), ExpressRoute, VPN Gateway, Application Gateway, Load Balancer/SLB, Azure Firewall, DDoS, Front Door, Traffic Manager, Private Link, AVNM, physical network, and WAN backbone. - Structured troubleshooting SOPs: Includes step-by-step methodologies such as cross-region jitter path-first analysis and SLB MUX node failure RCA. - Dashboard deep-links: Generates parameterized Geneva dashboard URLs (VFP MDM, Shoebox VMPerf, Sirius) and Geneva short-URL mappings. - Use Case: A support engineer investigating VFP packet drops on a VM host loads the hostnetworking reference, runs the VfpPortDropMetrics query with the correct cluster/database format, and opens the linked drops dashboard. ## Quick Start Ask for the KQL query to diagnose packet drops on a specific Azure VM or gateway, providing the subscription ID and time range.

Frequently Asked Questions about b01

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot Azure VM packet drops with KQL?▼

Start with the hostnetworking reference to query VFP MDM drop metrics (VfpPortDropMetrics, VmsNicDropMetrics) and Host NIC counters, then escalate to vm-infra physical path queries if VFP and NIC are clean. Always use the fully qualified cluster().database() format.

What KQL queries exist for ExpressRoute and VPN Gateway troubleshooting?▼

The skill includes 17 ExpressRoute circuit queries (health, peering, BGP, ARP, bandwidth), 33 ExpressRoute Gateway queries (tunnels, connection drops, BGP peers), and 11 VPN Gateway queries (tunnel status, IKE diagnostics, S2S/P2S connectivity) against the Hybridnetworking cluster.

Which Kusto clusters and databases does this skill query?▼

It targets azurecm/AzureCM, Hybridnetworking/aznwmds and GatewayManager, nrp/mdsnrp, armprod/ARMProd, azslb/azslbmds, azurecdn, waneng, azurehn/Azurehn, aztmmon, aznwsdn/nsmplus, azcore, and vmainsight/Air, among others.

How do I investigate cross-region Azure network latency or jitter?▼

Follow the path-first SOP: trace the physical path (VM to ToR to WAN edge via Swan TE), then scan all WAN backbone devices for OutDiscards in sXInterfaceTable, and only then check BGP/ISIS control plane events on confirmed path devices.

Can I get Geneva dashboard links for a specific VM or node?▼

Yes. Queries generate parameterized deep-links to VFP MDM dashboards (Support, Traffic, Drops, GFT), Shoebox VMPerf, Network-Dashboard-VM, and node-centric dashboards using Account, NodeId, ContainerId, and Cluster parameters.

What are the limitations when troubleshooting SLB MUX node failures?▼

SLB MUX nodes are managed by Service Fabric, not AzureCM, so LogNodeSnapshot queries will not find them. Use azslbmds tables (SlbCritical, NodeHealthEvent, SlbHealthEvent, SlbException) and note NodeHealthEvent uses TIMESTAMP/Role/NodeName columns.

Related Skills

Explore More Software Engineering Skills→
langfuselangfuse
34.0k

incident-alert-tickets

Look up and update Linear incident-alert tickets for Datadog monitors and on-call pages.

Official
Intermediate
azaslonovazaslonov

skill-apim-skuv1-investigator

Investigate Azure API Management SKUv1 incidents using ICM, alerts, and Kusto telemetry.

Community
Advanced
microsoftmicrosoft
1.1k

azmon-mirroredcatalogs-operations-cli

Onboards Azure Monitor telemetry into Fabric and correlates it with business data for impact analysis.

Official
Advanced
jonathan-vellajonathan-vella
6

azure-resource-lookup

List and discover Azure resources across subscriptions using Azure Resource Graph and KQL.

Community
Advanced