Azure sentinel solution

Question

Azure sentinel solution

Nikita Grunskii 20

Hello! We (HOLM Security) have solution in Azure Sentinel to collect and send data to Log Analytics workspace. And based on this article, service should be shut down at the end of Feb. We didn't get any notifications about that. Could you please explain if we need to migrate to another service (Azure Monitor Agent I believe).

Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator

2025-05-08T15:20:50.5133333+00:00

Hello @Nikita Grunskii,

Following up to check if you have any further questions or query, please do let us know.
Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator

2025-05-09T16:16:25.21+00:00

Hello @Nikita Grunskii,

Following up to check if you have any further questions or query, please do let us know.
Vigneshwar Duvva 2,300 Reputation points Microsoft External Staff Moderator

2025-05-12T10:48:36.3066667+00:00

Hello @Nikita Grunskii

Following up to see whether the answer provided by Jyotishree Moharana, is helpful?

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Accepted answer

0 additional answers

Your answer

Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator

2025-05-08T15:20:50.5133333+00:00

Hello @Nikita Grunskii,

Following up to check if you have any further questions or query, please do let us know.
Jyotishree Moharana 1,845 Reputation points Microsoft External Staff Moderator

2025-05-09T16:16:25.21+00:00

Hello @Nikita Grunskii,

Following up to check if you have any further questions or query, please do let us know.
Vigneshwar Duvva 2,300 Reputation points Microsoft External Staff Moderator

2025-05-12T10:48:36.3066667+00:00

Hello @Nikita Grunskii

Following up to see whether the answer provided by Jyotishree Moharana, is helpful?

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Answer 1

Hello @Nikita Grunskii,

That is correct, Microsoft officially retired the Log Analytics agent (also known as MMA or OMS) on August 31, 2024. If your organization is still using this legacy agent to send data to Log Analytics, you'll need to migrate to the Azure Monitor Agent (AMA) to maintain functionality and support.

Migrating to Azure Monitor Agent has many benefits.

Better Security and Performance: It uses modern authentication methods (like managed identities) and handles more data with improved performance.
Cost Efficiency: It lets you control exactly what data is collected using Data Collection Rules (DCRs), which can help reduce unnecessary costs.
Simplified Management: Instead of using multiple agents, AMA consolidates them into one, making it easier to manage.

The know the migration process to the Azure Monitor Agent (AMA) when you have an existing, legacy Log Analytics Agent (MMA/OMS), and are working with Microsoft Sentinel, kindly go through the document : Ama-migrate-Sentinel

Migration guidance : Migrate to Azure Monitor Agent from Log Analytics agent

Best practices for the migration : Best-practices-migrating-from-log-analytics-agent

Share via

Azure sentinel solution

0 additional answers

Your answer