Event banner
Event details
We set up the Windows Update for Business report Azure workbook (https://learn.microsoft.com/en-us/windows/deployment/update/wufb-reports-enable) to identify workstations that are missing updates, and submit a report to management. One afternoon we updated on several Windows workstations and got them fully patched with monthly updates, then left them online overnight to check in with Azure. 24 hours later, the WUfB report still showed all of them as "MultipleSecurityUpdatesMissing". Running an Azure log query, I could see the LastWUScanTime field was not correct, the OSversion was not correct, the OSBuilds were not correct, etc. In my query of UCDeviceAlert, "TimeGenerated" was about 5-8 hours after these computers had completed updates, so I would've expected the data to reflect the state of those workstations at that time. Is there a way to force machines to submit current data to Azure on demand, that will reflect in these WUfB reports by the next day? The report didn't show updated information for these workstations until at least 2 days after they became fully patched.
- EricMoe
Microsoft
Data latency in WUFB reports is documented here, https://learn.microsoft.com/en-us/windows/deployment/update/wufb-reports-use#data-latency, and the data latency on updates and update status can be 24-36 hours per the table. If after 36 hours you still are not seeing appropriate data, then I'd recommend opening a support case to have someone investigate deeper.EricMoe I see this says "Device connectivity to the internet and generally how active the device is influences how long it will take before it appears in Windows Update for Business reports" - is this indicating that a device that is more active will appear in WUfB reports more quickly, or less quickly?
- EricMoeThe data is transferred into the report as part of a snapshot, so regardless of how active you are, you still have latency because of the transfer of the data from the snapshot into the report. But if a device is offline, then its data will not get updated into the snapshot and therefore will continue to be out of date in the report.
