Will the "Windows event logs" function in the Log Analytics Workspace still functional while using the new AMA agent?

Question

Dear forum,

On August 31,2024 the new old Log Analytics agents won't be supported anymore by Azure. The recommendation of Azure is to migrate to the Azure Monitor Agent (AMA). I was wondering if the functionallity "Legacy agents management" in the Log Analytics workspace would still work with the AMA? Specifically the "Windows event logs functionallity"?

If not, are we required to use the change tracking functionallity using data collection rules and the new AMA or are there other options for Windows event logging?

Thank you for your time.

Kind regards,

Stephen.

Answer 1

In short - yes. You can use DCR functionality for this purpose. Details at https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent?tabs=portal

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin