Alerts if Azure VM drops out of Update management

Question

Hi,
I have tried to find alerts to following topics (related to Azure update management) but with bad luck. Servers that are part of Update management are reporting to Log Analytics workspace that are connected to same automation account where update management is.

1. Update agent readiness goes to or is "Not configured"
2. Hybrid worker last seen time is over 24h

Any tips or tricks what could be shared?

Answer 1

Hi @Bombbe ,

AFAIK, to automatically get notified or alerted on update agent readiness state change, currently there is no straight forward kusto table (for log alert) or metric signal (for metric alert) which captures update agent readiness state i.e., Ready or Disconnected or Not Configured.

I see this feedback item already being shared in Uservoice / feedback forum. If interested, you may upvote it. In general, Azure feature or product team would check feasibility of a feature request, prioritize against existing feature backlog, add them in roadmap as appropriate and would announce and/or update the related Azure document once a feature request is addressed.

You might already are aware but just letting you know in case you are not. The description of these three update agent readiness states are:

• Ready: The Hybrid Runbook Worker is deployed and was last seen less than one hour ago.
• Disconnected: The Hybrid Runbook Worker is deployed and was last seen over one hour ago.
• Not configured: The Hybrid Runbook Worker isn't found or hasn't finished the deployment.

For more information w.r.t above mentioned states, offline and online troubleshooter, please refer this or this document.

Also, just FYI, this document explains all the currently available kusto tables that are related to Update Management.

Answer 2

Same question asked by me.

https://learn.microsoft.com/en-us/answers/questions/568383/hybrid-runbook-worker-last-seen-time-monitoring.html

If i get powershell script to do all this for me then it will be helpful.