Forum Discussion
Log Analytics Query for computer last login/active date and time
Ah, that is Good and Bad, none of the Tables in that list that start with a "W" hold any logon / last accessed data (as far as I can see). The only one with promise is the Usage table, but that only holds one computer! I don't think you have collected any data in a table that pertains to login info?
LastScan will tell you that the computer was on at that time, so I added that. I'm not sure what else I can do given the data. Is this right?
WaaSDeploymentStatus
| where UpdateCategory == "Quality" and TimeGenerated > ago(60d)
| summarize arg_max(ReleaseName, DeploymentStatus, DetailedStatus, DetailedStatusLevel, ExpectedInstallDate, LastScan, UpdateReleasedDate ) by Computer
Never mind!
I added OSVersion to query.
The only thing I am curious about is how to get all the tables or atleast the useful once on my portal.
Thanks! That is helpful I believe. Can we add one more column where it will give the Current windows update version of system like 1903 or 1909. Right now it is giving us the OS build version.
Also, can you help me on how to add all the tables or the important ones that are always helpful?