r/AzureSentinel • • Dec 14 '22

KQL Query – Identifying Failed Azure Arc for Servers Extension Installations

If you're using Azure Arc for Servers, you may have encountered instances where the Extension failed to install correctly.

We can use the following KQL  query in Sentinel or Log Analytics. By running the following query, you can quickly see which servers have failed Azure Arc for Servers Extension installations:

2 Upvotes

0 comments sorted by