question

Alex-8321 avatar image
0 Votes"
Alex-8321 asked Suresh8771 commented

Log Analytics agent health issues should be resolved on your machines

When I go to azure security advisor I am seeing

Log Analytics agent health issues should be resolved on your machines.
and it is saying Agent not responsive or missing ID. but when I go to VM details I can see Agent is already installed and it is ready.



What is the best way to check it and make sure it is not false positive advisory as I am seeing already agent installed.

39797-screenshot-2020-11-12-131101.jpg


azure-monitorazure-security-center
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If either of below mentioned Log analytics extension status and heartbeat query is not giving result as expected then you may have to fix the Log analytics agent to resolve the issue.

0 Votes 0 ·

Hi @Alex-8321, Did you get chance to review my earlier response? Let me know if you have any further queries regarding it.

0 Votes 0 ·

Hi @Alex-8321, Did you get chance to review my earlier response? Let me know if you have any further queries regarding it.

0 Votes 0 ·

Hi, do you still require assistance? If not, please mark the answer as verified.

Thank you,
James

0 Votes 0 ·

1 Answer

tbgangav-MSFT avatar image
0 Votes"
tbgangav-MSFT answered Suresh8771 commented

Hi @Alex-8321,

AFAIK the agent status that you are referring is about VM agent but not Log Analytics agent so go to Extensions tile of VM and see if status of Log Analytics agent is “Provisioning succeeded” or not.

Linux:
40029-image.png

Windows:
39995-image.png

If status is shown as “Provisioning succeeded” then go to VM connected Log Analytics workspace and run “Heartbeat” query to see if live heartbeat records are being logged or not. This, this and this are related references.


image.png (25.5 KiB)
image.png (30.1 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Alex-8321
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·

I could see provision succeeded but nothing returning while running heartbeat query - no result for most of the basic querys


![84543-image.png][1]


0 Votes 0 ·
image.png (6.0 KiB)