dynamic group, expression restart required

[anyelussk8 0]

Good morning,

I want to create a dynamic group where I get all the computers that need to be restarted, either because the antivirus was updated to the latest version or because it requires it, but I can't do it. The image shows the expression I have, I don't know if I'm doing it wrong or I need another expression.

Currently I have it as in the image and I do not get any equipment that requires a restart, but when I see the equipment with red alerts if I get that they require restart.

thanks for your help,

[Marcos 5,741]

What about this expression?

[MichalJ 434]

Hello @anyelussk8, the proposal by Marcos is the correct one. The one you have used only relates to the restart needed to finish cleaning up malware.  You might consider adding one more condition, for "A computer restart is required for applying device control settings" (if you use device control). If not, the two conditions by Marcos should suffice. 

 

[anyelussk8 0]

1 hour ago, Marcos said:

¿Qué pasa con esta expresión?

Many thanks to both of you for helping me, this was the solution.

regards,