servicing and updates
1 TopicKQL update table query data issues
I've been trying and failing/falling down a rabbit hole trying to output a table showing vms and monthly KBs install status as columns. I've tried both Join and Union but in the case of Join I just get all as installed and when I use Union I don't see the expected data. https://i.stack.imgur.com/mz1BM.jpg Attempted queries //JOIN let AUGUPDATES = Update |where UpdateState == "Installed" | where KBID == "5029242" | project Computer, Aug_Installed=UpdateState ; let SEPTUPDATES = Update |where UpdateState == "Installed" | where KBID == "5030213" | project Computer, Sep_Installed=UpdateState ; let OCTUPDATES = Update |where UpdateState == "Installed" | where KBID == "5031362" | project Computer, Oct_Installed=UpdateState ; AUGTUPDATES | join kind=inner (SEPTUPDATES) on Computer | join kind=inner (OCTUPDATES) on Computer --------And---- //UNION let AUGUPDATES = Update |where UpdateState == "Installed" | where KBID == "5029242" | project Computer, Aug_Installed=UpdateState ; let SEPTUPDATES = Update |where UpdateState == "Installed" | where KBID == "5030213" | project Computer, Sep_Installed=UpdateState ; let OCTUPDATES = Update |where UpdateState == "Installed" | where KBID == "5031362" | project Computer, Oct_Installed=UpdateState ; union AUGUPDATES, SEPTUPDATES, OCTUPDATES1.1KViews0likes2Comments