Update

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Reference for Update table in Azure Monitor Logs.

Attribute	Value
Category	IT & Management Tools, Security
Basic Logs Eligible	✗ No (source)
Supports Transformations	✓ Yes (source)
Ingestion API Supported	✗ No
Azure Monitor Tables Reference	View Documentation

Contents

• Schema
• Solutions
• Content Items
• Resource Types

Schema (46 columns)

Source: Azure Monitor documentation

Column Name	Type	Description
_BilledSize	real	The record size in bytes
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
_ResourceId	string	A unique identifier for the resource that the record is associated with
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
ApprovalSource	string
Approved	bool
BulletinID	string
BulletinUrl	string
Classification	string
Computer	string
ComputerEnvironment	string
CVENumbers	string
InstallTimeAvailable	bool
InstallTimeDeviationRangeSeconds	real
InstallTimePredictionSeconds	real
KBID	string
ManagementGroupName	string
MSRCBulletinID	string
MSRCSeverity	string
Optional	bool
OSFullName	string
OSName	string
OSType	string
OSVersion	string
PackageRepository	string
PackageSeverity	string
Product	string
ProductArch	string
ProductVersion	string
PublishedDate	datetime
RebootBehavior	string
Resource	string
ResourceGroup	string
ResourceId	string
ResourceProvider	string
ResourceType	string
RevisionNumber	string
SourceComputerId	string
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
SubscriptionId	string
TimeGenerated	datetime
Title	string
Type	string	The name of the table
UpdateID	string
UpdateState	string
VMUUID	string

Solutions (4)

This table is used by the following solutions:

• MaturityModelForEventLogManagementM2131
• MicrosoftPurviewInsiderRiskManagement
• SAP BTP
• SOC Handbook

---

Content Items Using This Table (4)

Workbooks (4)

In solution MaturityModelForEventLogManagementM2131:

Workbook	Selection Criteria
MaturityModelForEventLogManagement_M2131

In solution MicrosoftPurviewInsiderRiskManagement:

Workbook	Selection Criteria
InsiderRiskManagement

In solution SAP BTP:

Workbook	Selection Criteria
SAPBTPActivity

In solution SOC Handbook: Classification != "Feature Packs"
UpdateState != "Installed"

Workbook
InvestigationInsights

Resource Types

This table collects data from the following Azure resource types:

• microsoft.compute/virtualmachines
• microsoft.conenctedvmwarevsphere/virtualmachines
• microsoft.azurestackhci/virtualmachines
• microsoft.scvmm/virtualmachines
• microsoft.compute/virtualmachinescalesets
• microsoft.automation/automationaccounts

Selection Criteria Summary (1 criteria, 1 total references)

References by type: 0 connectors, 1 content items, 0 ASIM parsers, 0 other parsers.

Selection Criteria	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
Classification != "Feature Packs" UpdateState != "Installed"	-	1	-	-	1
Total	0	1	0	0	1

Classification

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
!= Feature Packs	-	1	-	-	1

UpdateState

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
!= Installed	-	1	-	-	1

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index