Forum Discussion
Log Analytics Query for computer last login/active date and time
Hi, I am looking for a query where I can get last login/active date and time for computers in a separate column. I am already using the below query for windows update WaaSDeploymentStatu...
Ah, that is Good and Bad, none of the Tables in that list that start with a "W" hold any logon / last accessed data (as far as I can see). The only one with promise is the Usage table, but that only holds one computer! I don't think you have collected any data in a table that pertains to login info?
LastScan will tell you that the computer was on at that time, so I added that. I'm not sure what else I can do given the data. Is this right?
WaaSDeploymentStatus
| where UpdateCategory == "Quality" and TimeGenerated > ago(60d)
| summarize arg_max(ReleaseName, DeploymentStatus, DetailedStatus, DetailedStatusLevel, ExpectedInstallDate, LastScan, UpdateReleasedDate ) by Computer
Never mind!
I added OSVersion to query.
The only thing I am curious about is how to get all the tables or atleast the useful once on my portal.