Asim Parser User Prompter Agent Skill
Prompts the user for inputs to create a new ASIM schema parser. Use this skill when you need to gather information from the user to create a new ASIM parser.
Install
one command, takes just this skill from the repositorynpx skills add https://github.com/Azure/Azure-Sentinel --skill asim-parser-user-prompterThe instruction itself
5 sections, as written by the authorASIM Requirements Gathering
You will need to ask the user for various information before you can create a new ASIM parser. This skill will guide you on what information to ask for and how to ask for it.
Step 1: Documentation of the source data type
The source data type is the type of data that the ASIM parser will be parsing. Ask the user to provide a link to the source's documentation.
Step 2: Source table name
Ask the user to provide the name of the table where the data type is stored in Microsoft Sentinel.
Step 3: Log Analytics workspace
Ask the user to provide the Log Analytics workspace ID where the table is stored. This workspace ID is a GUID.
Validate the workspace and table name by querying the workspace using the log-analytics-workspace-queryer skill. Provide the skill with the workspace ID and the table name as the query. If the query fails, ask the user to provide the information again.
Step 4: Evaluate what ASIM schema the source data type maps to
Based on the documentation and the table name, evaluate what ASIM schema the source data type maps to. The available schemas are listed at: https://learn.microsoft.com/en-us/azure/sentinel/normalization-about-schemas. Choose from the schemas there.
If you are not sure which schema it maps to, inform the user that you cannot create a parser without knowing the target ASIM schema.
Other skills for the same job
different authors, same section of the catalogue
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
Replace with description of the skill and when Claude should use it.
Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies
This skill should be used when the user wants to "create a skill", "add a skill to plugin", "write a new skill", "improve skill description", "organize skill content", or needs guidance on skill structure, progressive disclosure, or skill development best practices for Claude Code plugins.
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
Use when creating new skills, editing existing skills, or verifying skills work before deployment
How to use it
Take azure/asim-parser-user-prompter from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.