AWX snippet: capture failed job evidence before rerun
A short sequence to collect status, variables, affected host and error events before rerunning an AWX job.
Read snippet
Snippets
Small technical pieces, easy to reuse.
Commands, queries, configuration fragments and short notes that are narrow enough to copy, adapt and validate quickly.
Snippets RSS activity-log 1 agentops 1 ai 1 aks 1 ansible 1 api-management 1 apim 1 app-service 1 application-gateway 6 automation 3 awx 1 azure 22 ci 2 cli 2 container-apps 1 diagnostic-settings 1 dns 11 dns-resolver 1 drift 1 egress 1 entra-id 1 false-positive 1 firewall 2 functions 1 gateway 1 governance 2 guardrails 1 hybrid 1 identity 8 incident 1 kql 20 kubernetes 1 lock 1 logs 18 messaging 2 monitoring 16 networking 4 oidc 1 operations 1 private-api 1 private-dns 1 private-endpoint 15 queue 1 rollback 4 runbook 24 security 3 service-bus 1 sql 1 state 1 storage 2 terraform 2 troubleshooting 1 waf 7 workload-identity 1
KQL snippet: find risky tool actions from an AI agent
A short query to isolate write-capable tool calls, their execution identity and correlation before disabling an AI agent.
Read snippetKQL snippet: prepare evidence for a managed WAF rule exclusion
A short query to isolate rule, field, URI and examples before proposing a targeted WAF exclusion.
Read snippetKQL snippet: qualify a Storage Queue backlog on a private path
A short query to separate missing consumption, retries, poison messages and access errors on a private Storage Queue.
Read snippetKQL snippet: diagnose Workload Identity Federation failures in CI
A short query to find federated principal sign-in failures before falling back to a client secret.
Read snippetKQL snippet: spot Azure Diagnostic Settings drift
A short query to find writes, deletes and destination changes that explain a sudden disappearance of logs.
Read snippetKQL snippet: correlate APIM errors on a private API
A short query to separate subscription or key issues, private backend routing, APIM policy failure and application-side API errors.
Read snippetKQL snippet: qualify an Azure Firewall denial on private egress
A short query to separate application rule denial, network rule denial and DNS proxy resolution before adding an overbroad rule.
Read snippetAzure snippet: check the Private DNS Resolver path before changing a zone
A short sequence to confirm private zone, VNet link, ruleset and forwarding rule before touching DNS records.
Read snippetKQL snippet: isolate Application Gateway 502s to a private backend
A short query to separate unavailable backend, application failure and WAF blocking when Application Gateway returns 502s on a private path.
Read snippetKQL snippet: isolate Service Bus private endpoint errors
A short query to separate missing connection evidence, identity denial, expired SAS and processing errors during a private Service Bus incident.
Read snippetKQL snippet: isolate Azure SQL private endpoint errors
A short query to separate firewall, authentication, public endpoint and missing connection evidence during a private Azure SQL incident.
Read snippetKQL snippet: isolate Azure Storage 403 on a private endpoint
A short query to separate identity, firewall, public endpoint and wrong subresource when private Azure Storage access is denied.
Read snippetKQL snippet: correlate private App Service and Application Gateway
A short query to separate WAF, gateway, private DNS, access restrictions and App Service logs during a private access incident.
Read snippetKQL snippet: correlate an Azure Functions private HTTP endpoint
A short query to separate DNS, private access, Functions runtime and application exceptions during a private HTTP incident.
Read snippetKQL snippet: correlate AKS private ingress and application logs
A short query to read ingress controller and application logs together when a private AKS route returns 502, timeouts or no endpoints.
Read snippetKQL snippet: diagnose Container Apps private ingress and revisions
A short query to correlate Azure Container Apps system and console logs when private ingress, probes or revision traffic fail.
Read snippetKQL snippet: correlate WAF and APIM on an Azure private API
A short query to see whether a private API request is blocked by Application Gateway WAF, received by APIM or missing from the expected path.
Read snippetKQL snippet: diagnose Key Vault denial with managed identity
A short query to separate identity denial, network path and source address when an Azure workload can no longer access Key Vault.
Read snippetKQL snippet: track synthetic probes for an Azure private path
A short query to track synthetic probe failures and separate DNS, TLS, WAF or Application Gateway symptoms on an Azure private path.
Read snippetAzure snippet: audit WAF custom rule priorities
A short command to list custom rules in an Azure WAF policy with priority, action and type before an urgent change.
Read snippetKQL snippet: detect authentication errors after secret rotation
A short query to watch 401, 403, and 500 errors after rotating an application secret or service identity.
Read snippetAzure snippet: detect Private Endpoint DNS drift
A short check to compare the expected DNS chain, returned private address, and test path from a workload or CI runner.
Read snippetAzure snippet: check Private Endpoint DNS resolution
A short sequence to confirm that an Azure service exposed through Private Endpoint resolves to a private address from the right network.
Read snippetKQL snippet: list Azure WAF blocked URIs quickly
A short KQL query to identify the most blocked URIs by Azure Web Application Firewall on Application Gateway.
Read snippetTerraform snippet: diagnose a stuck state lock before force-unlock
A short procedure to qualify a stuck Terraform lock, confirm that no apply is still active, and restart with a clean plan.
Read snippet