NeilMacMullen
@neilmacmullen.bsky.social
Coder, CTO of Sensize, bass player, creator of various open-source tools: kusto-loco, textrude, jumpfs
How pretty is this? Plotting asset journeys using a "pseudo heatmap" on the amazing MapsUI component by @pauldendulk.bsky.social Points are colored using a new "heatmap_color" function in the KQL engine
October 4, 2025 at 12:15 PM
How pretty is this? Plotting asset journeys using a "pseudo heatmap" on the amazing MapsUI component by @pauldendulk.bsky.social Points are colored using a new "heatmap_color" function in the KQL engine
Admittedly, this is more of a terminal feature but still... :-)
September 26, 2025 at 6:45 PM
Admittedly, this is more of a terminal feature but still... :-)
Kusto-Loco 1.3.8 released. Headline feature is client support for:
- Azure Defender (Advanced Threat Hunting)
- LogAnalytics
- ARG (Azure Resource groups)
Lokqldx can not only issue queries to these but also supports 'render' unlike the native APIs
github.com/NeilMacMulle...
KQL DataViz C#
- Azure Defender (Advanced Threat Hunting)
- LogAnalytics
- ARG (Azure Resource groups)
Lokqldx can not only issue queries to these but also supports 'render' unlike the native APIs
github.com/NeilMacMulle...
KQL DataViz C#
September 22, 2025 at 4:34 PM
Kusto-Loco 1.3.8 released. Headline feature is client support for:
- Azure Defender (Advanced Threat Hunting)
- LogAnalytics
- ARG (Azure Resource groups)
Lokqldx can not only issue queries to these but also supports 'render' unlike the native APIs
github.com/NeilMacMulle...
KQL DataViz C#
- Azure Defender (Advanced Threat Hunting)
- LogAnalytics
- ARG (Azure Resource groups)
Lokqldx can not only issue queries to these but also supports 'render' unlike the native APIs
github.com/NeilMacMulle...
KQL DataViz C#
I know the numbers aren't really meaningful but it'll be nice to hit triple digits... ;-)
KQL Kusto Lokqldx
KQL Kusto Lokqldx
September 20, 2025 at 11:28 AM
I know the numbers aren't really meaningful but it'll be nice to hit triple digits... ;-)
KQL Kusto Lokqldx
KQL Kusto Lokqldx
ARG/Defender don't support the render operator afaict but I found a way :-)
KQL Kusto lokqldx
KQL Kusto lokqldx
September 18, 2025 at 9:50 PM
ARG/Defender don't support the render operator afaict but I found a way :-)
KQL Kusto lokqldx
KQL Kusto lokqldx
HELP WANTED... It has not escaped my notice that a lot of people round here use KQL for something they call "infosec" rather than for drawing pretty charts. Therefore, I have added Defender, Monitor and ARG clients to Lokqldx. However, not being a user myself, I am looking for beta testers...
September 16, 2025 at 8:05 PM
HELP WANTED... It has not escaped my notice that a lot of people round here use KQL for something they call "infosec" rather than for drawing pretty charts. Therefore, I have added Defender, Monitor and ARG clients to Lokqldx. However, not being a user myself, I am looking for beta testers...
This guy has to go... I'll freely admit I'm _extremely_ disturbed by seen so many far-right thugs gathered in one place with the world's dimmest billionaire egging them on while our government smile politely and congratulate themselves for rising above it.
September 14, 2025 at 11:04 AM
This guy has to go... I'll freely admit I'm _extremely_ disturbed by seen so many far-right thugs gathered in one place with the world's dimmest billionaire egging them on while our government smile politely and congratulate themselves for rising above it.
Seems like a missed opportunity here to check out how the real experts would approach the trolley problem...
September 14, 2025 at 7:35 AM
Seems like a missed opportunity here to check out how the real experts would approach the trolley problem...
Oh dear, very latest VS preview (not insiders) seems to be suddenly very confused...
c# #VisualStudio developercommunity.visualstudio.com/t/Compiler-a...
Compiles fine in the stable version
c# #VisualStudio developercommunity.visualstudio.com/t/Compiler-a...
Compiles fine in the stable version
September 9, 2025 at 9:39 PM
Oh dear, very latest VS preview (not insiders) seems to be suddenly very confused...
c# #VisualStudio developercommunity.visualstudio.com/t/Compiler-a...
Compiles fine in the stable version
c# #VisualStudio developercommunity.visualstudio.com/t/Compiler-a...
Compiles fine in the stable version
A bit late announcing this "officially" but v1.3.6 is out ! The big features this time is... maps,maps,maps! but I also improved definition and usage you can now treat macros as lightweight built-in commands
As always, download from github...
github.com/NeilMacMulle...
#KQL C# #DataViz
As always, download from github...
github.com/NeilMacMulle...
#KQL C# #DataViz
September 9, 2025 at 8:11 PM
A bit late announcing this "officially" but v1.3.6 is out ! The big features this time is... maps,maps,maps! but I also improved definition and usage you can now treat macros as lightweight built-in commands
As always, download from github...
github.com/NeilMacMulle...
#KQL C# #DataViz
As always, download from github...
github.com/NeilMacMulle...
#KQL C# #DataViz
Got macros working with intellisense and dot invocation.
LokqlDx has had macros for long time but they've been a bit clunky to invoke. This should considerably reduce friction.
KQL C# Data Visualization
LokqlDx has had macros for long time but they've been a bit clunky to invoke. This should considerably reduce friction.
KQL C# Data Visualization
September 7, 2025 at 11:11 AM
Got macros working with intellisense and dot invocation.
LokqlDx has had macros for long time but they've been a bit clunky to invoke. This should considerably reduce friction.
KQL C# Data Visualization
LokqlDx has had macros for long time but they've been a bit clunky to invoke. This should considerably reduce friction.
KQL C# Data Visualization
Very pleased with the way mapping is shaping up in lokqldx This should make it to release tomorrow.
There are still a bunch of geo KQL functions to implement if anyone out there wants to help!
Project: github.com/NeilMacMulle...
C# KQL Kusto Map Geo
There are still a bunch of geo KQL functions to implement if anyone out there wants to help!
Project: github.com/NeilMacMulle...
C# KQL Kusto Map Geo
September 6, 2025 at 12:19 PM
Very pleased with the way mapping is shaping up in lokqldx This should make it to release tomorrow.
There are still a bunch of geo KQL functions to implement if anyone out there wants to help!
Project: github.com/NeilMacMulle...
C# KQL Kusto Map Geo
There are still a bunch of geo KQL functions to implement if anyone out there wants to help!
Project: github.com/NeilMacMulle...
C# KQL Kusto Map Geo
..And here comes the next LokqlDx feature thanks to a 6 hour train journey.... :-)
KQL Kusto
KQL Kusto
September 2, 2025 at 9:46 PM
..And here comes the next LokqlDx feature thanks to a 6 hour train journey.... :-)
KQL Kusto
KQL Kusto
It took a solid bank-holiday weekend but LokqDx now supports docking and adds tools! Oh and there's a new light theme and I added JsonL support for good measure
Download: github.com/NeilMacMulle...
c# KQL Kusto
Download: github.com/NeilMacMulle...
c# KQL Kusto
August 31, 2025 at 4:29 PM
It took a solid bank-holiday weekend but LokqDx now supports docking and adds tools! Oh and there's a new light theme and I added JsonL support for good measure
Download: github.com/NeilMacMulle...
c# KQL Kusto
Download: github.com/NeilMacMulle...
c# KQL Kusto
Also light theme !
August 27, 2025 at 11:47 AM
Also light theme !
NOOOOOOOOOOOOOOOOO!!!!!!!!
August 17, 2025 at 12:27 PM
NOOOOOOOOOOOOOOOOO!!!!!!!!
Kusto-loco 1.3.3 now out.
The big new feature is that LokqlDx now supports plugins. That means if you're a C# developer you can create new commands and KQL functions. Typical use-cases would be a command to import a custom data format.
Here's the demo project: ".processes" loads process ....
The big new feature is that LokqlDx now supports plugins. That means if you're a C# developer you can create new commands and KQL functions. Typical use-cases would be a command to import a custom data format.
Here's the demo project: ".processes" loads process ....
August 17, 2025 at 11:08 AM
Kusto-loco 1.3.3 now out.
The big new feature is that LokqlDx now supports plugins. That means if you're a C# developer you can create new commands and KQL functions. Typical use-cases would be a command to import a custom data format.
Here's the demo project: ".processes" loads process ....
The big new feature is that LokqlDx now supports plugins. That means if you're a C# developer you can create new commands and KQL functions. Typical use-cases would be a command to import a custom data format.
Here's the demo project: ".processes" loads process ....
Oh dear, spotted a few issues with the 1.3.0 release so here's Kusto-Loco 1.3.2. On the plus side I greatly reduced memory consumption for join/lookup and improved performance. It's now possible to do a lookup of a 40M row set against a 40K set in about 10s
August 13, 2025 at 7:38 PM
Oh dear, spotted a few issues with the 1.3.0 release so here's Kusto-Loco 1.3.2. On the plus side I greatly reduced memory consumption for join/lookup and improved performance. It's now possible to do a lookup of a 40M row set against a 40K set in about 10s
Summarization needs a little work - tjhe geo-hashing only accounts for around 700ms
August 3, 2025 at 7:51 PM
Summarization needs a little work - tjhe geo-hashing only accounts for around 700ms
I've been working on performance for Kusto-loco
This is the engine working on a 54 million row table in under half a second*. Pretty pleased so far :-)
C# #KQL
*Admittedly I have quite a beefy desktop.
This is the engine working on a 54 million row table in under half a second*. Pretty pleased so far :-)
C# #KQL
*Admittedly I have quite a beefy desktop.
August 3, 2025 at 7:42 PM
I've been working on performance for Kusto-loco
This is the engine working on a 54 million row table in under half a second*. Pretty pleased so far :-)
C# #KQL
*Admittedly I have quite a beefy desktop.
This is the engine working on a 54 million row table in under half a second*. Pretty pleased so far :-)
C# #KQL
*Admittedly I have quite a beefy desktop.
Anyone know how to get rid of this? I've got all the "obvious" copilot features turned off but this seems stubbornly persistent..
c# #csharp #visualstudio
c# #csharp #visualstudio
July 30, 2025 at 3:28 PM
Anyone know how to get rid of this? I've got all the "obvious" copilot features turned off but this seems stubbornly persistent..
c# #csharp #visualstudio
c# #csharp #visualstudio
I mean what even is the point of this thing? It's happy to do one at a time but useless as an automated assistant...
c# #copilot #visualstudio
c# #copilot #visualstudio
July 28, 2025 at 8:21 PM
I mean what even is the point of this thing? It's happy to do one at a time but useless as an automated assistant...
c# #copilot #visualstudio
c# #copilot #visualstudio