How to enable Azure VM Update Management when VM is linked to another workspace?

Question

I've got a couple of DCs in Azure that are linked to a Sentinel workspace for log analytics. Sentinel uses this to gather logs that it ingests for monitoring security events.

This appears to affect Updates Management/Automation as it won't allow me to manage updates for these VMs due to them being linked to another workspace.

So how do I manage updates on these VMs? I can't unlink the VMs from the Sentinel workspace. See attached screenshot.

Answer 1

Hi Lee, this thread may help you here: https://serverfault.com/questions/1093751/multihoming-of-windows-vm-in-multiple-log-analytics-workspaces-with-azure-auto