What's the use of OMS Gateway server when we integrating windows/Linux with AMA Agent.

Question

What's the use of OMS Gateway server when we integrating windows/Linux with AMA Agent.

Muhammed Ajsal 20

What's the use of Log Analytics Gateway Server When we integrating Windows servers with AMA Agent.

For Integrate Windows Servers with AMA Agent, first we need to make the server hybrid with azure arc, right?. To make server connected we need internet directly or through proxy, right?. So What's the use of gateway server for azure arc enabled servers ?

AnuragSingh-MSFT 21,551 Reputation points Moderator

2023-01-24T09:42:00.7266667+00:00

Muhammed Ajsal, following up to check if you had a chance to review the answers below.

Please let us know if you have any questions. Please 'Accept as answer' if it helped so that it can help others in the community looking for help on similar topics.

Accepted answer

0 additional answers

Your answer

AnuragSingh-MSFT 21,551 Reputation points Moderator

2023-01-24T09:42:00.7266667+00:00

Muhammed Ajsal, following up to check if you had a chance to review the answers below.

Please let us know if you have any questions. Please 'Accept as answer' if it helped so that it can help others in the community looking for help on similar topics.

Answer 1

Stanislav Zhelyazkov 28,596 MVP Volunteer Moderator

Hi,

Log Analytics Gateway (OMS Gateway) is an HTTP forward proxy that supports HTTP tunneling using the HTTP CONNECT command. This gateway sends data to Azure Automation and a Log Analytics workspace in Azure Monitor on behalf of the computers that cannot directly connect to the internet. The gateway is only for log agent related connectivity and does not support Azure Automation features like runbook, DSC, and others.

To put it simple it is proxy specifically made for Azure Monitor or Log Analytics agents. When you have Gateway deployed instead of the agents on other servers connecting directly to Log Analytics via Internet they can connect to the Log Analytics Gateway and the Log Analytics Gateway connects to Internet. That way the servers with those agents do not have to have direct Internet connection. When you configure the agents on those machine you will specify the Gateway as their proxy.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Muhammed Ajsal 20 Reputation points

2023-01-20T16:18:26.4966667+00:00

Is there a Microsoft doc for configure ama agent through proxy
Stanislav Zhelyazkov 28,596 Reputation points MVP Volunteer Moderator

2023-01-20T18:24:21.02+00:00

Hi,

Here are a few links:

Microsoft Monitoring Agent setup - it has information on setting proxy via Azure Monitor extension for Windows and Linux and for ARC as well.

If you install the agent manually via the UI you will screen to setup proxy when you install the agent. You can even configure it afterwards when you open the agent settings from Control Panel.

If you install manually but you want to automate the setup you have install switches for proxy setup.

I am not posting information on Log Analytics agent as you should move away from it due to being on path to deprecation.
Muhammed Ajsal 20 Reputation points

2023-01-20T19:23:55.5966667+00:00

I have already installed the 'azure connected machine agent' with public endpoint script on my windows machine and used the below command to connect it through gateway server. "$settings = @{"proxy"=@{mode="application";address="http://<ipaddressof_gatewayserver>:8080";auth="true"}}

New-AzConnectedMachineExtension -Name AzureMonitorWindowsAgent -ExtensionType AzureMonitorWindowsAgent -Publisher Microsoft.Azure.Monitor -ResourceGroupName <rgname> -MachineName <name> -Location eastus -Settings $settings -ProtectedSettings $protectedSettings ". After i run this command AMA agent installed successfully. I need to know if the logs from the server communicate through gateway?.
Stanislav Zhelyazkov 28,596 Reputation points MVP Volunteer Moderator

2023-01-20T19:41:17.1033333+00:00

If you have configure proxy for the azure monitor extension, the Azure Monitor agent will communicate only via that proxy. Whatever it is configured it will be honored.
Muhammed Ajsal 20 Reputation points

2023-01-21T03:23:17.4+00:00

How to verify the logs from the servers coming through gateway ?
Stanislav Zhelyazkov 28,596 Reputation points MVP Volunteer Moderator

2023-01-23T07:17:20.14+00:00

You can use Log Analytics Workspace Insights. It is available for every tenant under Monitor -> workbooks -> Log Analytics Workspace Insights. When clicking on your workspace another view will open where you can select Agents tab. There you will see information. This information comes from Heartbeat table which contains information for every agent connected.
Tomas F 0 Reputation points

2024-04-08T14:51:10.5866667+00:00

Hi Stanislav,

I know this is old threat but I do have similar issue/questions (as I need use AMA on Win Server to collect logs to sentinel via OMS gateway). I found MS document what hosts should be whitelisted for AMA but AMA needs to be pushed via ARC extension. Based on this I found this post, that it should work. I did whitelist all domains on OMS side (via Add-OMSGatewayAllowedHost) and after few iteration of installing and whitelisting, I was able to install Azure ARC agent but the initial connect failed with following error "Regional Service Discovery" Error="Get "https://gbl.his.arc.azure.com/discovery?location=westeurope&api-version=2.1": unexpected EOF" Proxy Status="proxy set via config command" Request URL="https://gbl.his.arc.azure.com/discovery?location=westeurope&api-version=2.1"the gbl.his.arc.azure.com is allowed on OMS gateway setting (later, I did even add *.his.arc.azure.com but it did not help) The OMS event logs do not contain any error just info log: INFO TcpConnection - Closing suspicious client/server connections which correspond in time with Azure ARC agent trying to do initial connect.

Adding "Hybrid Runbook Worker" between Allowed Client Certificates did not helped.
Stanislav Zhelyazkov 28,596 Reputation points MVP Volunteer Moderator

2024-04-09T05:59:04.1866667+00:00

Best is to open a new Q&A question.

Share via

What's the use of OMS Gateway server when we integrating windows/Linux with AMA Agent.

0 additional answers

Your answer