query-app-insights

# Query App Insights Query Azure Application Insights telemetry to answer questions about command usage, extension activity, performance. ## Prerequisites - `APP_INSIGHTS_API_KEY` env var - `APP_INSIGHTS_CLIENT_ID` env var ## Workflow 1. **Validate credentials** - check env vars exist 2. **Test API** - `tsx scripts/queryAppInsights.ts "customEvents | take 1"` 3. **Interpret question** - identify commands, extensions, time ranges, metrics 4. **Find executor name** - if checking a command, find its executor name (see references) 5. **Build KQL query** - use executor names, not command IDs 6. **Execute** - `tsx scripts/queryAppInsights.ts "<kql-query>"` 7. **Answer** - interpret results, format clearly ## Key Points - Telemetry uses **executor names**, not command IDs - Event pattern: ends with `/commandExecution` (Legacy/v2) or stored in `dependencies` table (OTEL/v3) - Tables: `customEvents` (Legacy), `dependencies` (OTEL Spans), `requests` (Root Spans) - OTEL Properties: `name` (Span name), `cloud_RoleName` (Extension name), `operation_Id` (Trace ID), `operation_ParentId` (Parent Span ID) - OTEL Root Filter: `where operation_ParentId == operation_Id` (Finds top-level spans in v3) - Measurements: `customMeasurements.executionTime` (ms for Legacy) or `duration` (ms for OTEL) ## References - `references/command-id-vs-executor.md` - Finding executor names, shared executors, commands without telemetry - `references/query-patterns.md` - Common KQL patterns - `references/script.md` - Script implementation details