def system_updates_is_set_to_on_2_3(security_center):
    """
    New query param in 1.1 is properties.parameters.systemUpdatesMonitoringEffect
    but it is not in the output of the general api call.  Nor in az policy definition list.
    """
    items_flagged_list = []
    for item in security_center:
        resource_group = item['name']
        system_updates = item['properties']['recommendations']['patch']
        if system_updates != 'On':
            items_flagged_list.append(resource_group)
    stats = {'items_flagged': len(items_flagged_list), 'items_checked': len
        (security_center)}
    metadata = {'finding_name': 'system_updates_is_set_to_on',
        'negative_name': 'system_updates_not_on', 'columns': ['Resource Group']
        }
    return {'items': items_flagged_list, 'stats': stats, 'metadata': metadata}
