Share via

Will OMS agent still work after 31 August 2024?

Yazan 5 Reputation points
2023-11-07T09:53:38.1566667+00:00

What happens if a machine is still using OMS agent after retirement on August 31st, 2024? Will it still be able to send logs to a workspace? Or will workspaces reject incoming logs from this agent?

Thanks!

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,139 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 6,436 Reputation points MVP
    2023-11-07T10:50:55.1066667+00:00

    The guidance just says it will be retired and you get no further support. It sounds like its just "support" rather than it stops working.

    The Log Analytics agent will be retired on August 31, 2024. After this date, Microsoft will no longer provide any support for the Log Analytics agent.

    source:
    https://learn.microsoft.com/en-gb/azure/azure-monitor/agents/azure-monitor-agent-migration

  2. Yazan 5 Reputation points
    2023-11-08T14:39:33.5733333+00:00

    I got a confirmation from MS that the OMS agent will stop ingesting logs to LA Workspaces after the 31st of August, 2024.

    0 comments
  3. Sandeep G-MSFT 19,106 Reputation points Microsoft Employee
    2023-11-14T09:53:20.5033333+00:00

    @Yazan

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "[The question author cannot accept their own answer. They can only accept answers by others] (https://docs.microsoft.com/en-us/answers/support/accepted-answers#why-only-one-accepted-answer)**)", I'll repost your solution in case you'd like to "[Accept] (https://docs.microsoft.com/en-us/answers/support/accepted-answers#accepted-answer-in-a-question-thread)**)" the answer.

    Issue: Will OMS agent still work after 31 August 2024?

    Resolution: Resolved by @Yazan

    As you mentioned above below is the information that you received from our support team.

    As per the Microsoft Legacy agents (MMA and OMS) agents will not be available on Azure Portal as agent will be retired. So, the Azure Virtual Machines and On-Prem Virtual Machines will not be able to send logs to LA Workspace. For this Microsoft is coming with a new solution for both Windows and Linux VMs called AMA agent (Azure Monitoring Agent).  I suggest you Migrating to Azure Monitor Agent from Legacy agents to avoid any disruptions. Please find the Microsoft documentation below for Migration.

    Yes, for the Azure VMs and On-Prem VMs the OMS agent will stop working after Aug 31_st_, 2024, and will stop ingesting logs to LA Workspace.  Before the retirement date, If there is update regarding functionality of OMS agent Microsoft will send an official update.  

    Let us know if you have any further questions on this

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.