Show log of computer updates

[chris_young]

Is it possible to query a computer and show when certain updates were applied?

I know the software names and versions are present in the scans, so can we see when the versions changed?

Also ideally can we see when Microsoft updates were applied?

I think all this information should be in the database but don't have a clue where to start to extract it.  Is there a tool already written for this sort of query?

[james_ellis]

Hi @chris_young 

Thank you for posting on our community.

There are some limitations for what you are trying to achieve. Let's see if we can help get some information you are looking for.

Firstly, ascertain that you have the "Check For Microsoft Security Update Setting" set to enabled.

https://docs.flexera.com/csi/Content/helplibrary/Check_for_Missing_Microsoft_Security_Update_Settings.htm

SVM Agent collects current data of the system. Within the scan log, you can check a section known as:

WINUPDATESTATE START

The log will list current available and installed Windows Update.

To view the log, you would need to have "logging" for agent enabled.

Here is our knowledge base article to enable logging. 

https://community.flexera.com/t5/Software-Vulnerability-Manager/Enable-Logging-for-Installed-SVM-Agents-through-Regedit/ta-p/113279

From the UI, once the data from the agent has been compiled, you will see the current state of the host. The OS will have either a Secure or Insecure state.

No historic installations and/or Windows updates are known to be collected by the agent or kept on the database. Should the database contain such information, then there will be methods to collect the information. We have the Database Console available from the UI:

https://docs.flexera.com/csi/Content/helplibrary/Database_Console.htm#svm_cloud_edition_reporting_1569618596_1033460

I am happy to arrange a remote session if you wish to go over any of the steps or have further questions.

Kind regards,

James Ellis

[chris_young]

Hi @james_ellis , thanks for this.  Is there any way you can think of that I can get a list of when updates were applied?  I think the log is not ideal (and probably no better than looking in the Windows Updates history on the PC).  Can any of the other Flexera products do this?

[james_ellis · Accepted solution]

Hi @chris_young , 

Thank you for your patience.

I have reviewed your query with the team. 

Flexera does not collect the historic Windows update information that you have described.

Should you wish for this feature to be available in SVM, we welcome a feature request on our Ideas platform.

https://flexerasfdc.ideas.aha.io/ideas?project=SVM

Once submitted, other SVM customers can vote for the idea that also benefit from this feature.

Please let me know if you have any questions or need further assistance.

Kind regards,

James Ellis