Azure Resource Graph Query Builder

MonitoringAzure

Build Resource Graph Explorer query configs with KQL queries for orphaned resources, compliance reports, and inventory.

Azure Resource Graph Configuration

Build Resource Graph Explorer query configs with KQL queries for orphaned resources, compliance reports, and cross-subscription inventory.

Required Fields

queryNamequeriesqueries[0].namequeries[0].kql

{
  "queryName": "Orphaned Resources Report",
  "description": "Finds unattached disks, unused public IPs, and orphaned NICs across all subscriptions.",
  "subscriptions": ["a1b2c3d4-e5f6-7890-abcd-ef1234567890", "b2c3d4e5-f6a7-8901-bcde-f23456789012"],
  "managementGroups": [],
  "queries": [
    {
      "name": "UnattachedManagedDisks",
      "table": "resources",
      "kql": "resources\n| where type == 'microsoft.compute/disks'\n| where managedBy == ''\n| where properties.diskState == 'Unattached'\n| project name, resourceGroup, subscriptionId, location, sku.name, properties.diskSizeGB, tags\n| order by tolong(properties_diskSizeGB) desc",
      "resultFormat": "table"
    },
    {
      "name": "UnusedPublicIPs",
      "table": "resources",
      "kql": "resources\n| where type == 'microsoft.network/publicipaddresses'\n| where properties.ipConfiguration == ''\n| where properties.natGateway == ''\n| project name, resourceGroup, subscriptionId, location, properties.ipAddress, sku.name, tags\n| order by name asc",
      "resultFormat": "table"
    },
    {
      "name": "OrphanedNICs",
      "table": "resources",
      "kql": "resources\n| where type == 'microsoft.network/networkinterfaces'\n| where isnull(properties.virtualMachine)\n| where isnull(properties.privateEndpoint)\n| project name, resourceGroup, subscriptionId, location, properties.ipConfigurations[0].properties.privateIPAddress\n| order by name asc",
      "resultFormat": "table"
    },
    {
      "name": "ResourceCountByType",
      "table": "resources",
      "kql": "resources\n| summarize count() by type\n| order by count_ desc\n| take 20",
      "resultFormat": "chart"
    },
    {
      "name": "VMsWithoutTags",
      "table": "resources",
      "kql": "resources\n| where type == 'microsoft.compute/virtualmachines'\n| where isnull(tags) or tags == '{}'\n| project name, resourceGroup, subscriptionId, location, properties.hardwareProfile.vmSize",
      "resultFormat": "table"
    }
  ],
  "scheduledExport": {
    "enabled": true,
    "frequency": "Weekly",
    "dayOfWeek": "Monday",
    "timeOfDay": "08:00",
    "format": "CSV",
    "destination": {
      "type": "StorageAccount",
      "storageAccountId": "/subscriptions/a1b2c3d4/resourceGroups/rg-reports/providers/Microsoft.Storage/storageAccounts/stcontosoreports",
      "containerName": "resource-graph-reports"
    }
  }
}

Generated Output

Output will appear here...

Overview

Build Resource Graph Explorer query configs with KQL queries for orphaned resources, compliance reports, and inventory. This tool helps Azure engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

How Engineers Use This

•Generating azure resource graph configurations for new infrastructure deployments.
•Validating existing configurations against best practices before applying changes.
•Learning Azure service configuration patterns through interactive examples.
•Accelerating infrastructure-as-code development by producing correct JSON/YAML starting points.

Questions & Answers

Does this tool connect to my Azure account?

No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.

Are the generated configurations production-ready?

The tool produces syntactically valid configurations based on current Azure service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.

Related Learning Guides

Cost Management Guide24 min read
Azure Monitor & Application Insights26 min read

Was this tool helpful?

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.