Log Analytics agent health issues should be resolved on your machines

Alex 21 Reputation points
2020-11-14T07:19:24.793+00:00

When I go to azure security advisor I am seeing

Log Analytics agent health issues should be resolved on your machines.
and it is saying Agent not responsive or missing ID. but when I go to VM details I can see Agent is already installed and it is ready.

What is the best way to check it and make sure it is not false positive advisory as I am seeing already agent installed.

39797-screenshot-2020-11-12-131101.jpg

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,463 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,490 questions
{count} votes

1 answer

Sort by: Most helpful
  1. tbgangav-MSFT 10,421 Reputation points
    2020-11-16T14:38:52.407+00:00

    Hi @Alex ,

    AFAIK the agent status that you are referring is about VM agent but not Log Analytics agent so go to Extensions tile of VM and see if status of Log Analytics agent is “Provisioning succeeded” or not.

    Linux:
    40029-image.png

    Windows:
    39995-image.png

    If status is shown as “Provisioning succeeded” then go to VM connected Log Analytics workspace and run “Heartbeat” query to see if live heartbeat records are being logged or not. This, this and this are related references.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.