Agent Health Status

[sagarsetia2225]

Hello Team, What's the best way to check if MMA Agent on the host is able to communicate to Azure.

Can I setup a query in Advanced Hunting to check if a server in a Device Group is not able to communicate in last X hours.

[#2]

You could check what the latest events are that were imported into MDATP.

DeviceEvents
| summarize max(Timestamp) by DeviceName
| where max_Timestamp < (now() - 5h)

[#3]

Thanks Thijs, It worked.