Query Azure Arc + Azure VMs extension statues

Question

Hi,
I have Arc +normal VMs that has extensions installed but the status is "Failed"

I have policy in place that show compliance status of vms that has not Qualys installed but policy do not know that the status of installation (even though it is in failed status is shows compliant in policy). What would be proper way to query all my vms so I could collect data which vms has extension that has been failed (Powershell, CLI, resource graph, etc)?

Answer 1

Hi,
It might be best to change the policy to have the following condition as well:

{  
                "field": "Microsoft.Compute/virtualMachines/extensions/provisioningState",  
                "in": [  
                  "Succeeded",  
                  "Provisioning succeeded"  
                ]  
              }  

This will make sure that the agent is at least provisioned successfully when reported to the policy. Of course there could be still other problems with the agent but provisioning will not be one of them.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.