Forum Discussion

sagarsetia2225's avatar
sagarsetia2225
Copper Contributor
Jul 06, 2020

Agent Health Status

Hello Team, What's the best way to check if MMA Agent on the host is able to communicate to Azure.

 

Can I setup a query in Advanced Hunting to check if a server in a Device Group is not able to communicate in last X hours.

  • Thijs Lecomte's avatar
    Thijs Lecomte
    Bronze Contributor
    You could check what the latest events are that were imported into MDATP.

    DeviceEvents
    | summarize max(Timestamp) by DeviceName
    | where max_Timestamp < (now() - 5h)

Resources