question

Goofoff avatar image
0 Votes"
Goofoff asked AdminAlainDiazQuesada-0569 edited

Azure Update Management Reporting

Does anyone know how i can get a report ( monthly weekly etc.) that I can pull off Azure Update Management for my servers?
I want to be able to get down to If an auditor asks what patches were successfully applied to X server in June. Can i pull that report somehow?

azure-automation
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdminAlainDiazQuesada-0569 avatar image
0 Votes"
AdminAlainDiazQuesada-0569 answered AdminAlainDiazQuesada-0569 edited

Hi Subhra-0229

The exact kql query may be composed like this in the azure logs.

UpdateRunProgress
| where TimeGenerated > ago(14h) <-- this section is used to establish the time you want to go back in records
| summarize arg_max(TimeGenerated, Title, InstallationStatus, Resource, UpdateRunName) by UpdateId
| project TimeGenerated, Resource, Title, InstallationStatus, UpdateRunName
| where InstallationStatus == "Succeeded"


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Subhra-0229 avatar image
0 Votes"
Subhra-0229 answered

where do i get the code for it or how do I run it , i am new can some one tell how to start and where to fetch the repotrt from in azure

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

olufemiaMSFT avatar image
0 Votes"
olufemiaMSFT answered olufemiaMSFT edited

Hello Goofoff,

To report on what patches were successfully applied to your servers, try querying the UpdateRunProgress record as it includes the "InstallationStatus" property (among others). Use TimeGenerated to slice the result based on your desired date-time range e.g. daily, weekly.

11185-azurereport.png

Hope this helps.



azurereport.png (105.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Sam-Cogan avatar image
0 Votes"
Sam-Cogan answered AdminAlainDiazQuesada-0569 commented

You can query update management data from the log analytics workspace it is attached to. You can find the details here - https://docs.microsoft.com/en-us/azure/automation/automation-update-management-query-logs


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

That link is now a 404. Is there an updated version of this link or how to do this?

0 Votes 0 ·

For anyone else looking for this. Here is the link Sam had mentioned
https://docs.microsoft.com/en-us/azure/automation/update-management/query-logs

0 Votes 0 ·

Hi Sam

Is there a way to send this report to any channel, say, slack or email self, autoamtically once a report is created, right now what i have done is
i created an alert in azure with a query to report installed updates in a certain time period and if there is 1 count of this alert it creates a link to the alert of course and post it in a slack channel but is not that efficient, i woul like to produce this repport and narrow down the info to only the installed updates.

anybody can help with that or ideas?.
Thanks in advance.

0 Votes 0 ·