All | inputlookup windows_event_system | dedup Host | sort Host Host Host * -15m now
Failed Windows Update By Host eventtype="Update_Failed" package=* host="$EventHost$"| dedup package, host | stats sparkline as Trend count by host | sort -count $Time.earliest$ $Time.latest$
Failed Windows Update By KB Number eventtype="Update_Failed" package=* host="$EventHost$"| dedup package, host | stats sparkline as Trend count by package_title| sort -count $Time.earliest$ $Time.latest$
Failed Windows Update Over Time By Host eventtype="Update_Failed" package=* host="$EventHost$"| dedup package, host | timechart count by host useother=f $Time.earliest$ $Time.latest$ Failed Windows Update Over Time By KB Number eventtype="Update_Failed" package=* host="$EventHost$"| dedup package, host | timechart count by package useother=f $Time.earliest$ $Time.latest$ Successful Windows Update By Host eventtype="Update_Successful_windows" package=* host="$EventHost$"| dedup package, host | stats sparkline as Trend count by host | sort -count $Time.earliest$ $Time.latest$
Successful Windows Update By KB Number eventtype="Update_Successful_windows" package=* host="$EventHost$"| dedup package, host | stats sparkline as Trend count by package_title| sort -count $Time.earliest$ $Time.latest$
Successful Windows Update Over Time By Host eventtype="Update_Successful_windows" package=* host="$EventHost$"| dedup package, host | timechart count by host useother=f $Time.earliest$ $Time.latest$ Successful Windows Update Over Time By KB Number eventtype="Update_Successful_windows" package=* host="$EventHost$"| dedup package, host | timechart count by package useother=f $Time.earliest$ $Time.latest$

More reports