As many of you, I would like to list all machines that are out of date concerning "windows updates patch" (KBxxxxx), I know it is a tricky one after reading lots of idea submissions in this community ;-)
That's why my 1st goal would be to get a list from the data lake of all endpoints that were last patched with [installed_on] older than (today - XX days) with XX as a variable
I started with following standard query, but indeed "installed_on" is a string field "mm/dd/yyyy", that's why the "order by" doesn't work as expected...
meta_hostname AS ep_name,
WHERE query_name = 'windows_updates_patch'
ORDER BY installed_on DESC
Looking forward to reading your answers/feebacks/inputs, whatever can .
Thanks for your help!