Update coverage summary visualisation

kql/windows-software-updates-update-coverage-summary.kql

@@ -1,15 +1,14 @@
-//Shows all updates newer than 90 days and all updates with < 100% coverage and renders their coverage summary
+//Shows all updates newer than 30 days and all updates with < 100% coverage and renders their coverage summary
 Update
-| where MSRCSeverity == "Critical" or MSRCSeverity == "Security"
+| where MSRCSeverity in ("Critical", "Important", "Moderate", "Security")
-| where TimeGenerated > now(-180days) or UpdateID in ( 
+| where PublishedDate > now(-30days) or UpdateID in ( 
     (Update
-    | where MSRCSeverity == "Critical" or MSRCSeverity == "Security"
+    | where MSRCSeverity in ("Critical", "Important", "Moderate", "Security")
     | summarize arg_max(TimeGenerated, *) by UpdateID,SourceComputerId
     | where UpdateState != "Installed"
+    | summarize count() by UpdateID
     | project UpdateID)
 )
 | summarize arg_max(TimeGenerated, *) by UpdateID,SourceComputerId
-| summarize NotInstalledCount = countif(UpdateState != "Installed"), InstalledCount = countif(UpdateState == "Installed"), TotalCount = count() by Product, MSRCSeverity, KBID, Title
+| summarize NotInstalledCount = countif(UpdateState != "Installed"), InstalledCount = countif(UpdateState == "Installed"), TotalCount = count() by Product, MSRCSeverity, PublishedDate, KBID, Title
-//| project Product, MSRCSeverity, KBID, Title, NotInstalledCount, InstalledCount, TotalCount, Coverage = strcat(tostring(InstalledCount / TotalCount * 100),"%")
+| project Update=strcat(Product," - ", Title), MSRCSeverity, DaysOld=datetime_diff("Day",now(),PublishedDate), NotInstalledCount,InstalledCount,TotalCount
-| project Update=strcat(Product," - ", Title), NotInstalledCount,InstalledCount
-| render barchart with (kind = stacked)