Windows Update
Checks specified servers and alerts if patches and updates from Windows Update have not been installed recently.
Overview
The Windows Update Event Monitor checks remote machines and alerts if it finds that they have not had patches installed in more than a specified number of days. It provides a great way to be reminded about machines that might be under the control of other users and haven't been updated recently.
Use Cases
- Security Patch Alerts: Detecting unpatched and vulnerable systems.
Monitoring Options
Patch Installation Monitoring
-
Alert Based on Update Installation: Alert with [Info/Warning/Error/Critical] if updates have not been installed in the last [#] days.
-
Definition Updates for Windows Defender: Alert based on the number of days since definition updates for Windows Defender Antivirus have been installed.
-
Alert on Available Updates: Alert with [Info/Warning/Error/Critical] if updates are available.
Update Filtering
- Ignore Windows Defender Definition Updates: Enable this option to filter out any definition updates for Windows Defender from your notifications.
Notification Configuration
-
Installed Updates Visibility:
- Show all installed updates in all notifications.
- Show the latest installed updates in all notifications.
- Show the latest cumulative update installed in all notifications.
- Show pending updates in all notifications.
- Show the latest installed update in all notifications.
-
Updates to Ignore: Enter the names of updates you want the event monitor to ignore in the provided text field.
Authentication and Security
The account used for authentication must be a member of the Performance Monitor Users group and the Distributed COM Users group, or have admin rights.
Protocols
Data Points
| Data Point | Description |
|---|---|
| Most Recent Updates | The time of the most recent update |
Sample Output
