Hi Michel Sfeir,
Before executing KQL query in Log Analytics Workspace, ensure Inventory and Change tracking is enabled on the respective VM by selecting appropriate Log Analytics Workspace.
You can execute the KQL query in Log Analytics Workspace to retrieve the installed software details.
For a single VM:
ConfigurationData
| where Computer == "<your vm name>"
| where ConfigDataType == "Software"
| project Computer,SoftwareName, Publisher, CurrentVersion, Size
| order by Computer asc
For multiple VMs:
ConfigurationData
| where Computer in ("<your VM1>", "<your VM2>")
| where ConfigDataType == "Software"
| project Computer,SoftwareName, Publisher, CurrentVersion, Size
| order by Computer asc
Once results were generated, now you can export the respective results into csv file. Click on share option and select the format to export the results
You can also include relevant columns by modifying your query based on the columns available for "ConfigurationData" table, you can inspect the schema of the ConfigurationData
ConfigurationData
| getschema
(or)
ConfigurationData
| take 1
Please follow the documentation for more information: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/configurationdata#columns
If the information is helpful, please click on "Accept Answer" and "Upvote"
If you have any queries, please do let us know, we will help you.