Forum Discussion
log analytics how to pull all updates installed on a server with names
CliveWatson
Then you for the response Clive.
I have a Windows and Linux OMS agent installed. i am able to pull data from Windows OMS agent and apply updates and see what updates and patches are missing. these are non-azure vms, so from my on-prem to azure. i can only see updates on the boxes since the agent was installed. nothing before that. i have also tried to quarry to pull list of all the patches that have been applied. i have not been successful in that. i would like to at least get name of patches that are applied and maybe date with it.
if i can get some help i would appreciate it.
That is how the agent works, data is from installation time. If you wanted older data you'd have to use the Log Analytocs api to import it, but that's not a trivial piece of work.
Hi Clive, I've got Update Management setup and it works in terms of installing updates. I want a way to ascertain what patches and versions (as well as packages with versions for Linux) are installed on a particular box. This can then be compared against an external database of patch information to ascertain if any patches have been installed outside of the approval process.
The information in Log Analytics does not appear to provide this, though I haven't worked much with Log Analytics so it's possible I don't know how. I have searched online and can't find the answer, hence commenting here.
Is there a way to query an API or something and get a JSON back, please? Or indeed go direct to the VM agent? Anything that shows that current state of the VM would be helpful, ideally with some audit information.
Thanks,
Neil.
- Did you look at the examples? https://docs.microsoft.com/en-us/azure/automation/update-management/query-logs
CliveWatsonHi Clive. Thanks for the reply. Yes I saw those and they do provide useful information but from what I can see it all pertains to what Update Management did rather than the current status of a machine. I wanted a way to ascsertain what updates/packages were on a machine regardless of how they were installed, which I don't seem to be able to find. It doesn't look like manually installed updates/packages would be logged anywhere. Or have I missed the query?!
Neil.
CliveWatson thank you, sir! that helps alot coming from an MVP. i can take that let the boss know i was right the first time.
