Naxaya snippets https://naxaya.com/snippets/ Reusable technical snippets published on Naxaya. en KQL snippet: isolate Service Bus private endpoint errors https://naxaya.com/articles/snippet-kql-service-bus-private-endpoint-errors/ https://naxaya.com/articles/snippet-kql-service-bus-private-endpoint-errors/ Mon, 15 Jun 2026 00:00:00 GMT A short query to separate missing connection evidence, identity denial, expired SAS and processing errors during a private Service Bus incident. KQL snippet: isolate Azure SQL private endpoint errors https://naxaya.com/articles/snippet-kql-azure-sql-private-endpoint-errors/ https://naxaya.com/articles/snippet-kql-azure-sql-private-endpoint-errors/ Sun, 14 Jun 2026 00:00:00 GMT A short query to separate firewall, authentication, public endpoint and missing connection evidence during a private Azure SQL incident. KQL snippet: isolate Azure Storage 403 on a private endpoint https://naxaya.com/articles/snippet-kql-azure-storage-private-endpoint-403/ https://naxaya.com/articles/snippet-kql-azure-storage-private-endpoint-403/ Sat, 13 Jun 2026 00:00:00 GMT A short query to separate identity, firewall, public endpoint and wrong subresource when private Azure Storage access is denied. KQL snippet: correlate private App Service and Application Gateway https://naxaya.com/articles/snippet-kql-app-service-private-endpoint-logs/ https://naxaya.com/articles/snippet-kql-app-service-private-endpoint-logs/ Fri, 12 Jun 2026 00:00:00 GMT A short query to separate WAF, gateway, private DNS, access restrictions and App Service logs during a private access incident. KQL snippet: correlate an Azure Functions private HTTP endpoint https://naxaya.com/articles/snippet-kql-azure-functions-private-http-trigger/ https://naxaya.com/articles/snippet-kql-azure-functions-private-http-trigger/ Thu, 11 Jun 2026 00:00:00 GMT A short query to separate DNS, private access, Functions runtime and application exceptions during a private HTTP incident. KQL snippet: correlate AKS private ingress and application logs https://naxaya.com/articles/snippet-kql-aks-private-ingress-nginx/ https://naxaya.com/articles/snippet-kql-aks-private-ingress-nginx/ Wed, 10 Jun 2026 00:00:00 GMT A short query to read ingress controller and application logs together when a private AKS route returns 502, timeouts or no endpoints. KQL snippet: diagnose Container Apps private ingress and revisions https://naxaya.com/articles/snippet-kql-container-apps-private-ingress-revisions/ https://naxaya.com/articles/snippet-kql-container-apps-private-ingress-revisions/ Tue, 09 Jun 2026 00:00:00 GMT A short query to correlate Azure Container Apps system and console logs when private ingress, probes or revision traffic fail. KQL snippet: correlate WAF and APIM on an Azure private API https://naxaya.com/articles/snippet-kql-correlate-waf-apim-private-api/ https://naxaya.com/articles/snippet-kql-correlate-waf-apim-private-api/ Mon, 08 Jun 2026 00:00:00 GMT A short query to see whether a private API request is blocked by Application Gateway WAF, received by APIM or missing from the expected path. KQL snippet: diagnose Key Vault denial with managed identity https://naxaya.com/articles/snippet-kql-managed-identity-key-vault-denied-access/ https://naxaya.com/articles/snippet-kql-managed-identity-key-vault-denied-access/ Sun, 07 Jun 2026 00:00:00 GMT A short query to separate identity denial, network path and source address when an Azure workload can no longer access Key Vault. KQL snippet: track synthetic probes for an Azure private path https://naxaya.com/articles/snippet-kql-azure-private-path-synthetic-probes/ https://naxaya.com/articles/snippet-kql-azure-private-path-synthetic-probes/ Sat, 06 Jun 2026 00:00:00 GMT A short query to track synthetic probe failures and separate DNS, TLS, WAF or Application Gateway symptoms on an Azure private path. Azure snippet: audit WAF custom rule priorities https://naxaya.com/articles/snippet-azure-waf-audit-custom-rule-priorities/ https://naxaya.com/articles/snippet-azure-waf-audit-custom-rule-priorities/ Fri, 05 Jun 2026 00:00:00 GMT A short command to list custom rules in an Azure WAF policy with priority, action and type before an urgent change. KQL snippet: detect authentication errors after secret rotation https://naxaya.com/articles/snippet-kql-auth-errors-after-secret-rotation/ https://naxaya.com/articles/snippet-kql-auth-errors-after-secret-rotation/ Thu, 04 Jun 2026 00:00:00 GMT A short query to watch 401, 403, and 500 errors after rotating an application secret or service identity. Azure snippet: detect Private Endpoint DNS drift https://naxaya.com/articles/snippet-azure-private-endpoint-drift-dns/ https://naxaya.com/articles/snippet-azure-private-endpoint-drift-dns/ Wed, 03 Jun 2026 00:00:00 GMT A short check to compare the expected DNS chain, returned private address, and test path from a workload or CI runner. Azure snippet: check Private Endpoint DNS resolution https://naxaya.com/articles/snippet-azure-private-endpoint-dns-check/ https://naxaya.com/articles/snippet-azure-private-endpoint-dns-check/ Tue, 02 Jun 2026 00:00:00 GMT A short sequence to confirm that an Azure service exposed through Private Endpoint resolves to a private address from the right network. KQL snippet: list Azure WAF blocked URIs quickly https://naxaya.com/articles/snippet-kql-waf-top-blocked-uris/ https://naxaya.com/articles/snippet-kql-waf-top-blocked-uris/ Tue, 02 Jun 2026 00:00:00 GMT A short KQL query to identify the most blocked URIs by Azure Web Application Firewall on Application Gateway. Terraform snippet: diagnose a stuck state lock before force-unlock https://naxaya.com/articles/snippet-terraform-state-lock-diagnostic/ https://naxaya.com/articles/snippet-terraform-state-lock-diagnostic/ Tue, 02 Jun 2026 00:00:00 GMT A short procedure to qualify a stuck Terraform lock, confirm that no apply is still active, and restart with a clean plan.