This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Does anyone know how i can get a report ( monthly weekly etc.) that I can pull off Azure Update Management for my servers?
I want to be able to get down to If an auditor asks what patches were successfully applied to X server in June. Can i pull that report somehow?
You can query update management data from the log analytics workspace it is attached to. You can find the details here - https://learn.microsoft.com/en-us/azure/automation/automation-update-management-query-logs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 8%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGC%3C/text%3E%3C/svg%3E)
That link is now a 404. Is there an updated version of this link or how to do this?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 74%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETT%3C/text%3E%3C/svg%3E)
For anyone else looking for this. Here is the link Sam had mentioned
https://learn.microsoft.com/en-us/azure/automation/update-management/query-logs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 94%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Hi Sam
Is there a way to send this report to any channel, say, slack or email self, autoamtically once a report is created, right now what i have done is
i created an alert in azure with a query to report installed updates in a certain time period and if there is 1 count of this alert it creates a link to the alert of course and post it in a slack channel but is not that efficient, i woul like to produce this repport and narrow down the info to only the installed updates.
anybody can help with that or ideas?.
Thanks in advance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 47%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAP%3C/text%3E%3C/svg%3E)
Hi AdminAlainDiazQuesada-0569,
Can you share what exactly steps you included in creating this alert so that we can give a try and see how does it works.
Hello Goofoff,
To report on what patches were successfully applied to your servers, try querying the UpdateRunProgress record as it includes the "InstallationStatus" property (among others). Use TimeGenerated to slice the result based on your desired date-time range e.g. daily, weekly.
Hope this helps.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 77%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
where do i get the code for it or how do I run it , i am new can some one tell how to start and where to fetch the repotrt from in azure
Hi Subhra-0229
The exact kql query may be composed like this in the azure logs.
UpdateRunProgress
| where TimeGenerated > ago(14h) <-- this section is used to establish the time you want to go back in records
| summarize arg_max(TimeGenerated, Title, InstallationStatus, Resource, UpdateRunName) by UpdateId
| project TimeGenerated, Resource, Title, InstallationStatus, UpdateRunName
| where InstallationStatus == "Succeeded"