User Profile
Morten_Knudsen
Brass Contributor
Joined Jul 05, 2018
User Widgets
Recent Discussions
TimeGenerated
Hi, I'm trying to return the LAST set of records - related to Updates I'm using this, but my problem is, that it only returns the set of records, if the time is 100% the same. | summarize hint.strategy=partitioned arg_max(TimeGenerated,*) by Computer,UpdateID I would like to give 1 min of "slack", so it returns all records +1/-1 the last value of TimeGenerated. How can I accomplish that ?Lost connection to "Network Performance Monitor" solution
We are using the LogAnalytics solution “Network Performance Monitor” Ealier today, I disabled one of the service connectivity test “Skype Online”, because we are not using Skype Online After I did this, I lost connection to the GUI part for Network Performance Monitor as shown below – and now I cannot configure it I can see, that data is still flowing from the agents, but I cannot configure the settings anymore I have tried to DELETE the whole solution – and ADD it again, with NO luck Any ideas to fix this ?How to add TEXT data e.g. "Need important update" in a Tile
Anyone having a query sample and instructions on how to add TITLE and SUBTITLE in TILES in Azure It only shows the Count - how can I make a TEXT column with e.g. "number of servers" TITLE: Need Critical updates Subtitle: Servers Footer: Last 30 days ------- Sample query is provided below Update | where TimeGenerated > now(-30d) | where OSType!="Linux" and Optional==false | where (UpdateState =~ "Needed") and ((Classification == "Critical Updates")) and (Approved!=false) and (PublishedDate < ago(31d)) | where (Product contains "server") and (Product !contains "drivers") | summarize arg_max(TimeGenerated, *) by Computer,UpdateID | distinct Computer | countHow can I run a powershell script (Antimalware Collection) through the MMA agent ?
I have prepared a Powershell script that 1) asks Windows about which antivirus system is running and 2) parses the result using HTTP Data Collector API. But is it possible to wrap the script into the MMA agent, tha is already installed and running on all computers/servers ??AntiMalware collection script does not collect any data from Win10 machines
I have enabled the AntiMalware collection in Azure LogAnalytics. On Win10 machines v1803 with latest updates until May 2019, I see this in the Eventlog under Operations Manager Event 9991 - AntiMalware Collection Script Started : Then another 5 sec later Event 9991 - AntiMalware Collection Script Finished : AntiMalware Collection Script Returned But there is NO data in the ProtectionStatus table about the machine. Other data about the machine IS COLLECTED fine, for example heartbeat, system update, etc. Hints ? I have other older WIn10 machines that shows in ProtectionStatus, but not newer Win10 machines Powershell is latest 5.1OMS / Log Analytics - Filter Servers vs. Client computers
I'm a rookie into using Dashboards, PowerBI, Query, so bear with me, if my questions are basic 🙂 1. I would like to setup an Custom Update Dashboard on Azure, that contains the following views: Chile servers with missing critical updates or security updates Denmark servers with missing critical updates or security updates Norway servers with missing critical updates or security updates Chile client computers with missing critical updates or security updates Denmark client computers with missing critical updates or security updates Norway client computers with missing critical updates or security updates I'm hoping to be able to filter by RemoteIPCountry and OSVersion or similar It would be perfert with a nice graph per country with possibility to drill down How do I do that ? 2. I have also read that I should be able to clone current views in Log Analytics View Designer, but in my case, I don't see any of the standard OMS views in the View Designer - just a clean template Cheers MortenRe: Dashboard not showing actual value, but shows 1K - how can I change to actual value
CliveWatson Thanks again Clive. We are getting close, but Azure Dashboard is new to me. I ahve been using View Designer so far. I have a simple query I would like to show on my dashboard with a single number. When I Edit my dashboard, I have the option to add 25 tiles from the gallery dashboard. Which of them would give me either Single number or Two Numbers query. A simple Query could be: Heartbeat | where TimeGenerated > ago(31d) | summarize hint.strategy=partitioned arg_max(TimeGenerated, *) by Computer | summarize total=count(Computer) | project tostring(total)
