We can use powershell script based monitor, to achieve our goal.
$api = New-Object -comObject "MOM.ScriptAPI" $PropertyBag = $api.CreatePropertyBag() $LastPatchDate = Get-HotFix | Sort-Object InstalledOn | Select-Object -Last 1 | Select -Expandproperty InstalledOn $rv = ((Get-Date) - $LastPatchDate).TotalDays $PropertyBag.AddValue("Days",$rv) $PropertyBag
Here's some screenshots from my lab test.
criteria (we may set it to 60 in our situation)
alert generated due to servers not patched more than 400 days
and I've confirmed that value "255.xxx" and "328.xxx" did not generate the alert since the criteria is set to 400 or higher (in our situation, we can set the criteria to 60).