Jun 21 2019
- last edited on
Apr 07 2022
I have query that is supposed to get the data related to Security Updates and Critical Updates from devices connected to Log Analytics workspace.
This query works fine in one Log Analytics workspace but shows a syntax error in another Log Analytics workspace while configuring an alert.
Security Update Query
Update | where UpdateState == 'Needed' and Optional == false and Classification == 'Security Updates' and Approved != false | summarize AggregatedValue = count() by Computer
Critical Updates Query
Update | where UpdateState == 'Needed' and Optional == false and Classification == 'Critical Updates' and Approved != false | summarize count() by Computer
Need help in finding why this query shows a syntax error while i use it for configuring an alert.
Thanks in Advance
Jun 24 2019 11:51 AM - edited Jun 24 2019 11:53 AM
Thanks for your response. I am getting a Syntax error while trying to execute this query from the Logs to get the data and also while configuring an alert using this query.
Please find the screenshot attached for the reference.