Home

OMS Update management - How to "read" logs?

%3CLINGO-SUB%20id%3D%22lingo-sub-843361%22%20slang%3D%22en-US%22%3EOMS%20Update%20management%20-%20How%20to%20%22read%22%20logs%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-843361%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20onboarded%20some%20first%20machines%20so%20that%20they%20will%20report%20update%20status%20to%20azure%20and%20get%20some%20update%20schedules%20assigned.%3C%2FP%3E%3CP%3ENow%20i'm%20asking%20myself%20how%20i%20can%20read%20the%20logs.%3C%2FP%3E%3CP%3ELet%20me%20outline%20one%20example%3A%20I%20noticed%20that%20on%20one%20machine%20there%20was%20a%20security%20update%20missing.%20After%20one%20week%20(because%20of%20the%20assigned%20update%20schedule%20(weekly))%20the%20machine%20was%20back%20in%20a%20healthy%20state.%3CBR%20%2F%3ENow%20i%20would%20like%20to%20figure%20out%20how%20can%20i%20find%20a%20good%2C%20readable%20log%20to%20see%20when%20and%20which%20update%20was%20exactly%20have%20been%20installed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20further%20question%3A%20In%20former%20times%20we've%20implemented%20a%20WSUS%20and%20for%20this%20a%20GPO%20which%20configured%20this%20WSUS%20as%20a%20source%20for%20our%20servers.%3C%2FP%3E%3CP%3ENow%20I'm%20setting%20up%20azure%20update%20management.%20It%20seems%20that%20the%20earlier%20configuration%20made%20per%20gpo%20will%20be%20overwritten%20by%20the%20azure%20config%2C%20is%20this%20correct%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-843361%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUpdate%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-844082%22%20slang%3D%22en-US%22%3ERe%3A%20OMS%20Update%20management%20-%20How%20to%20%22read%22%20logs%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-844082%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F275685%22%20target%3D%22_blank%22%3E%40PatrickF11%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20example%20queries%26nbsp%3B%20in%20the%20docs%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fautomation%2Fautomation-update-management%23search-logs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fautomation%2Fautomation-update-management%23search-logs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi community,

 

i onboarded some first machines so that they will report update status to azure and get some update schedules assigned.

Now i'm asking myself how i can read the logs.

Let me outline one example: I noticed that on one machine there was a security update missing. After one week (because of the assigned update schedule (weekly)) the machine was back in a healthy state.
Now i would like to figure out how can i find a good, readable log to see when and which update was exactly have been installed.

 

One further question: In former times we've implemented a WSUS and for this a GPO which configured this WSUS as a source for our servers.

Now I'm setting up azure update management. It seems that the earlier configuration made per gpo will be overwritten by the azure config, is this correct?

1 Reply
Highlighted