How to configure Log Analytics to fetch logs of all autopilot devices in endpoint manager?

Question

Dear Community,

We want to use Azure Log Analytics to collect logs from all our Windows 10 devices ( auto-pilot devices). Would you please share your inputs to achieve this configuration?

Thank you

Regards
Nagur

Answer 1

Hi @Anonymous ,

Welcome to Microsoft Q&A! Thanks for posting the question.

Based on my understanding, you are trying to configure agent on Windows 10 devices using Windows Autopilot, to collect logs to Log Analytics workspace. There are two agents which can be installed and configured to send log to Azure Log Analytics workspace:

1. Azure Monitor Agent - This will require the machine to be connected to Azure using Azure Arc.

2. Log Analytics Agent (Also called Microsoft Monitoring Agent) - this method does not require the machine to be connected to Azure Arc and the agent can be installed using commandline with required parameters.

However, these agents are supported only for Windows 10 Enterprise (including multi-session) and Pro (Server scenarios only), where server scenario means - "*Running the OS on server hardware, i.e. machines that are always connected, always turned on, and not running other workloads (PC, office, browser, etc.) *". Please refer to agent supported scenarios at this link: Agents for Windows OS.

Therefore, if you are looking for collection of logs from Client machines (to be used as PC), collecting logs to Log Analytics Workspace will not be an ideal situation, but you may use it for machines running the OS on server hardware (Always ON and Always Connected and not running other workloads (PC, office, browser, etc.)).

Please let me know if you have any questions.

---

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.