Queries for the UpdateRunProgress table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Patch installation failure for your machines

List for each machine the installation status of the updates where the installation was not successful.

// To create an alert for this query, click '+ New alert rule'
UpdateRunProgress
| where TimeGenerated>ago(1d)
| where InstallationStatus == "NotStarted"
| summarize by Title, InstallationStatus, SourceComputerId, UpdateId, Computer, ResourceId
| join kind= inner (
    UpdateRunProgress
    | where TimeGenerated>ago(1d)
    | where InstallationStatus != "NotStarted"
    | summarize by Title, InstallationStatus, SourceComputerId, UpdateId, Computer
) on UpdateId
| where InstallationStatus1 != "Succeed"
| summarize by Title, InstallationStatus, Computer, ResourceId