Agent Health Status

Copper Contributor

Hello Team, What's the best way to check if MMA Agent on the host is able to communicate to Azure.


Can I setup a query in Advanced Hunting to check if a server in a Device Group is not able to communicate in last X hours.

2 Replies
You could check what the latest events are that were imported into MDATP.

| summarize max(Timestamp) by DeviceName
| where max_Timestamp < (now() - 5h)

Thanks Thijs, It worked.