Azure Monitoring Agent installed & connected, but not sending heartbeats or logs to Analytics workspace. Although it was sending logs and heartbeat before.

Question

Azure Monitoring Agent installed & connected, but not sending heartbeats or logs to Analytics workspace. Although it was sending logs and heartbeat before.

Anonymous

The Azure Monitoring Agent is installed and connected, indicating a functioning state. However, it's currently not transmitting heartbeats or logs to the Azure Analytics workspace, even though it was successfully doing so in the past.

Accepted answer

0 additional answers

Your answer

Answer 1

Ryan Hill 30,281 Microsoft Employee Moderator

Hi @Anonymous

Use the following query to view the heartbeats the agent was last successfully sent.

Heartbeat
| where Category == "Azure Monitor Agent"
| take 10
| order by TimeGenerated desc

But I suggest using the AgentTroubleshooter tool that's installed along the agent to help isolate the issue, see Use Azure Monitor Troubleshooter - Azure Monitor | Microsoft Learn. Obtaining the logs will better help determine what the underlying issue. Feel free to share the results in a comment below for better assistance.

Anonymous

2024-01-09T09:10:55.4066667+00:00

Hi @Ryan Hill

The following screenshots will elaborate on my issue as well. Here, my five machines are connected using the Arc Agent, but these are not sending any heartbeats to Azure Sentinel. Sometimes these machines send logs regularly, and sometimes their status is connected, but there are no logs in the Heartbeat or SecurityEvent tables.
Note: These machines are on-prem Laptops.
Ryan Hill 30,281 Reputation points Microsoft Employee Moderator

2024-01-09T19:05:02.6433333+00:00

@Mujtaba Rehman what was the outcome of the Troubleshooter when you ran it on the on-prem laptops?

Share via

Azure Monitoring Agent installed & connected, but not sending heartbeats or logs to Analytics workspace. Although it was sending logs and heartbeat before.

0 additional answers

Your answer