reflex

Manage Reflex items (Data Activator triggers and alerts)

Authentication scope: fabric

list

List reflexes in a workspace

fabio reflex list --workspace <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID

Examples

fabio reflex list --workspace $WS

Read-only · Returns list

show

Show details of a reflex

fabio reflex show --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID

Read-only · Returns object

create

Create a new reflex

fabio reflex create --workspace <value> --name <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--name	string	Yes	Reflex display name
--description	string	No	Optional description
--sensitivity-label	string	No	Sensitivity label ID to apply on creation

Mutates state · Returns object

update

Update reflex properties (name and/or description)

fabio reflex update --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID
--name	string	No	New display name
--description	string	No	New description

Mutates state · Returns object

delete

Delete a reflex

fabio reflex delete --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID
--hard-delete	bool	No	Permanently delete (cannot be recovered)

Mutates state · Destructive · Returns void

get-definition

Get the definition of a reflex

fabio reflex get-definition --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID
--decode	bool	No	Decode base64 payloads inline (adds decodedPayload field)

Examples

fabio reflex get-definition --workspace $WS --id $REFLEX --decode

Read-only · Long-running operation · Returns object

update-definition

Update the definition of a reflex

fabio reflex update-definition --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID
--file	string	No	Path to definition file
--content	string	No	Inline definition content

Mutates state · Long-running operation · Returns void

create-trigger

Create a trigger with auto-generated Reflex definition (KQL source + email/Teams alert)

fabio reflex create-trigger --workspace <value> --name <value> --eventhouse-id <value> --database <value> --table <value> --condition <value> --action <value> --recipients <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--name	string	Yes	Reflex display name
--eventhouse-id	string	Yes	Eventhouse item ID (the Eventhouse containing the KQL database)
--database	string	Yes	KQL database name
--table	string	Yes	KQL table name to monitor
--condition	string	Yes	KQL condition expression (e.g., EventType == 'Flood')
--action	enum	Yes	Alert action type: email or teams One of: email, teams.
--recipients	string	Yes	Comma-separated recipient email addresses
--message	string	No	Optional custom alert message
--interval	integer	No	Query execution interval in seconds (default: 60)

Examples

fabio reflex create-trigger --workspace $WS --name "Flood Alert Illinois" --eventhouse-id $EH --database "WeatherDB" --table "StormEvents" --condition "State == 'ILLINOIS' and EventType == 'Flood'" --action email --recipients "[email protected],[email protected]" --interval 120

fabio reflex create-trigger --workspace $WS --name "High Temperature Alert" --eventhouse-id $EH --database "SensorDB" --table "SensorEvents" --condition "Temperature > 50" --action teams --recipients "[email protected]" --message "Temperature threshold exceeded!"

Mutates state · Returns object

configure-kql-source

Configure a KQL data source (portal-only operation)

fabio reflex configure-kql-source --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex ID

Mutates state · Returns object

create-rule

Create a monitoring rule in an existing reflex (via the Activator MCP server)

fabio reflex create-rule --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID
--rule	string	No	Full createRuleParams JSON (inline, @file, or stdin). Takes precedence over the typed flags; fabio injects artifactId/workspaceId
--name	string	No	Rule name (typed mode)
--description	string	No	Rule description (typed mode; defaults to the name)
--kql	string	No	KQL query text defining the monitored stream (typed mode)
--interval	string	No	Query execution interval in seconds (typed mode)
--eventhouse-id	string	No	KQL DATABASE item id to monitor (NOT the eventhouse id — pass the KQL database inside the eventhouse). Mutually exclusive with –cluster
--eventhouse-workspace	string	No	Workspace of the KQL database (defaults to –workspace)
--cluster	string	No	Azure Data Explorer cluster host (source; use with –database)
--database	string	No	Azure Data Explorer database name (use with –cluster)
--split-column	string	No	Column to group by for per-entity monitoring (required by CHANGE conditions)
--column	string	No	Column to monitor (typed mode)
--condition	string	No	Condition function, e.g. isGreaterThan / increasesAbove / decreasesBelow / changesTo (typed mode)
--value	string	No	Threshold value for the condition (number, boolean, or string) (typed mode)
--action	string	No	Action to trigger: email or teams (typed mode)
--recipients	string	No	Recipient email(s), comma-separated (typed mode)
--subject	string	No	Email subject (email action; defaults to the name)
--message	string	No	Message body (email body / Teams message; supports {columnName} placeholders)
--headline	string	No	Headline shown in the alert (defaults to the name)
--locale	string	No	Message locale (typed mode)

Examples

fabio reflex create-rule --workspace $WS --id $REFLEX --name "High CPU" --kql "Metrics | project cpu, machineId" --eventhouse-id $KQLDB --column cpu --condition isGreaterThan --value 90 --recipients [email protected]

fabio reflex create-rule --workspace $WS --id $REFLEX --rule @rule.json

Mutates state · Returns object

mcp-url

Print the Activator remote MCP server URL for this reflex

fabio reflex mcp-url --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID

Examples

fabio reflex mcp-url --workspace $WS --id $REFLEX

Read-only · Returns object

list-rules

List monitoring rules in a reflex (via the Activator MCP server)

fabio reflex list-rules --workspace <value> --id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID

Examples

fabio reflex list-rules --workspace $WS --id $REFLEX

Read-only · Returns list

start-rule

Start (enable) a monitoring rule (via the Activator MCP server)

fabio reflex start-rule --workspace <value> --id <value> --rule-id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID
--rule-id	string	Yes	Rule ID to start (from reflex list-rules)

Examples

fabio reflex start-rule --workspace $WS --id $REFLEX --rule-id $RULE

Mutates state · Returns object

stop-rule

Stop (disable) a monitoring rule (via the Activator MCP server)

fabio reflex stop-rule --workspace <value> --id <value> --rule-id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID
--rule-id	string	Yes	Rule ID to stop (from reflex list-rules)

Examples

fabio reflex stop-rule --workspace $WS --id $REFLEX --rule-id $RULE

Mutates state · Returns object

delete-rule

Delete a monitoring rule (via the Activator MCP server) — irreversible

fabio reflex delete-rule --workspace <value> --id <value> --rule-id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID
--rule-id	string	Yes	Rule ID to delete (from reflex list-rules)

Examples

fabio reflex delete-rule --workspace $WS --id $REFLEX --rule-id $RULE --dry-run

Mutates state · Destructive · Returns void

rule-activations

Show the activation (fired-alert) history for a rule (via the Activator MCP server)

fabio reflex rule-activations --workspace <value> --id <value> --rule-id <value>

Flag	Type	Required	Description
--workspace	string	Yes	Workspace ID
--id	string	Yes	Reflex (Activator artifact) ID
--rule-id	string	Yes	Rule ID to inspect (from reflex list-rules)
--start-time	string	No	Start of the window (ISO 8601; default: 24 hours ago)
--end-time	string	No	End of the window (ISO 8601; default: now)
--max-results	string	No	Maximum activations to return (default 100, max 2000)

Examples

fabio reflex rule-activations --workspace $WS --id $REFLEX --rule-id $RULE --max-results 50

Read-only · Returns list