Azure log analytics

0
votes

I have to fetch the report containing the list of Azure VMs having security patches pending and name of those patches to be updated/installed using kusto query language in log analytics.Please help me out on this and thanks in advance

1
securityazure-log-analytics

1 Answers

0
votes

I believe below is the query in basic form which you are looking for.

Update
| where (Classification has "Security") and (UpdateState =~ "Needed") and (Approved != false)
| project Computer, Title

For more information and for source of the query, please refer this Azure document.