The Live KQL Pipeline Visualizer renders a real-time visual flow diagram of your KQL query as you type. It breaks the query into constituent pipe stages — source table, filters, projections, aggregations, joins — and displays them as connected nodes with arrows. This visual representation helps you instantly understand data flow and transformation logic in complex Kusto queries.

The visualizer handles the most common KQL operators: where (filter), project (column selection), extend (add columns), summarize (aggregation), join (table joins), union (combine tables), sort (ordering), top (limit results), and render (output). Complex nested subqueries are also supported for advanced KQL patterns.

Each node represents one pipe stage in your query execution. Arrows show data flow direction — data starts at the source table (top) and flows through each transformation step to the final output. Node colors indicate operator type: blue = source table, green = filter, yellow = transform, purple = aggregation. This KQL breakdown makes complex queries instantly comprehensible.

No connection to Azure. This is a purely visual KQL analysis tool. It parses Kusto syntax locally in your browser and does not execute queries, connect to any Azure service, Microsoft Sentinel workspace, or send any data externally. Perfect for offline learning and query planning.

Partially. The visualizer helps you verify query structure and data flow logic. However, it does not execute queries or validate against actual schema and tables. Always test your KQL in Microsoft Sentinel's Log Analytics first to catch runtime errors and validate against your workspace schema.

This tool is invaluable for: KQL learners mastering query structure, SOC analysts reviewing complex threat hunting rules, Azure admins documenting data pipelines, and anyone who needs to explain complex KQL to non-technical stakeholders. The visual pipeline breakdown makes KQL logic instantly accessible.

Yes. Take a screenshot of the pipeline visualization for documentation, presentations, or training materials. The diagram format is ideal for explaining query logic in security briefings and runbooks without requiring the audience to understand Kusto syntax.

Visual learning accelerates KQL mastery. Instead of parsing pipe operators mentally, the KQL query breakdown shows exactly what each stage does and how data transforms. Write a query, see the pipeline, then paste the same query into Sentinel to see actual results — learning by doing with instant visual feedback.

Yes. Copy any KQL query from the input area and paste it directly into Microsoft Sentinel's Log Analytics query editor or use it in Analytics Rules, Hunting Queries, or Workbooks. The visualizer is ideal for testing and understanding query structure before deployment.

Yes, completely free. One of 52 free tools available at jasperbernaers.com. No login required, no limits on visualizations — unlimited Kusto query analysis.