From 0bb5407623364b3dd5daf7ef9578048c60bfd1fb Mon Sep 17 00:00:00 2001
From: Mike Ray <15928587+MikeRayMSFT@users.noreply.github.com>
Date: Mon, 23 Sep 2024 14:26:40 -0700
Subject: [PATCH] Add hybrid compute-extension-last-connect

---
 .../hybrid-compute-extension-last-connect.kql              | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 samples/features/azure-arc/troubleshooting/hybrid-compute-extension-last-connect.kql

diff --git a/samples/features/azure-arc/troubleshooting/hybrid-compute-extension-last-connect.kql b/samples/features/azure-arc/troubleshooting/hybrid-compute-extension-last-connect.kql
new file mode 100644
index 00000000..6536813a
--- /dev/null
+++ b/samples/features/azure-arc/troubleshooting/hybrid-compute-extension-last-connect.kql
@@ -0,0 +1,7 @@
+resources
+    | where type =~ 'microsoft.hybridcompute/machines/extensions'
+    | where properties.type in ('WindowsAgent.SqlServer','LinuxAgent.SqlServer')
+    | parse id with * '/providers/Microsoft.HybridCompute/machines/' machineName '/extensions/' *
+    | parse properties with * 'timestampUTC : ' timestampUTC ';' *
+    | project timestampUTC, subscriptionId, resourceGroup, machineName
+    | order by timestampUTC desc
\ No newline at end of file