Hello,
Why create a Query...when you could get the same information from the SEPM system Logs and Computer Status Reports?
To Create a System Logs from SEPM for your Issue:
1) SEPM > Monitors > Logs
2) Log type: System
3) Log Content: Client Activity
4) Select Time Range.
5) Click on Advance Settings
6) Event type: Client content Update Events
Check these Articles:
About log types
http://www.symantec.com/docs/HOWTO27271
About the different types of Symantec Endpoint Protection Manager Reports
http://www.symantec.com/docs/TECH95538
Hope that helps!!