Sep 23 2019
05:49 AM
- last edited on
Apr 08 2022
10:07 AM
by
TechCommunityAP
Sep 23 2019
05:49 AM
- last edited on
Apr 08 2022
10:07 AM
by
TechCommunityAP
The following example shows a list of Computers that were missing one or more critical updates a few days ago and are still missing updates.
let ComputersMissingUpdates3DaysAgo = Update | where TimeGenerated between (ago(3d)..ago(2d)) | where Classification == "Critical Updates" and UpdateState != "Not needed" and UpdateState != "NotNeeded" | summarize makeset(Computer); Update | where TimeGenerated > ago(1d) | where Classification == "Critical Updates" and UpdateState != "Not needed" and UpdateState != "NotNeeded" | where Computer in (ComputersMissingUpdates3DaysAgo) | summarize UniqueUpdatesCount = dcount(Product) by Computer, OSType
The materialize let provides syntax error
Sep 23 2019 07:30 AM
Go to Log Analytics and Run Query
Nov 05 2019 03:11 AM
TQ it was a silly mistake. both the let statement is not clubbed to derive output. while i placed then without space, it provided output. no one noticed it even me. after some retries i found that.