Limit Change Tracking and Inventory deployment scope
Important
Change Tracking and Inventory using Log Analytics agent has retired on 31 August 2024 and will work on limited support till 01 February 2025. We recommend that you use Azure Monitoring Agent as the new supporting agent. Follow the guidelines for migration from Change Tracking and inventory using Log Analytics to Change Tracking and inventory using Azure Monitoring Agent version.
Note
Change Tracking & Inventory with Log Analytics onboarding via Azure portal will not be allowed since the service has retired on 31st August 2024. We recommend that you configure new version of Change Tracking & Inventory with AMA. Your existing VMs on Change Tracking & Inventory with legacy agent will continue to work till 1st February, 2025. For more information, see Enable Change Tracking and Inventory using Azure Monitoring Agent.
This article describes how to work with scope configurations when using the Change Tracking and Inventory feature to deploy changes to your VMs. For more information, see Targeting monitoring solutions in Azure Monitor (Preview).
About scope configurations
A scope configuration is a group of one or more saved searches (queries) used to limit the scope of Change Tracking and Inventory to specific computers. The scope configuration is used within the Log Analytics workspace to target the computers to enable. When you add a computer to changes from the feature, the computer is also added to a saved search in the workspace.
By default, Change Tracking and Inventory creates a computer group named ChangeTracking__MicrosoftDefaultComputerGroup depending on how you enabled machines:
- From the Automation account, you selected + Add Azure VMs.
- From the Automation account, you selected Manage machines, and then you selected the option Enable on all available machines or you selected Enable on selected machines.
If one of the methods above is selected, this computer group is added to the MicrosoftDefaultScopeConfig-ChangeTracking scope configuration. You can also add one or more custom computer groups to this scope to match your management needs and control how specific computers are enabled for management with Change Tracking and Inventory.
To remove one or more machines from the ChangeTracking__MicrosoftDefaultComputerGroup to stop managing them with Change Tracking and Inventory, see Remove VMs from Change Tracking and Inventory.
Set the scope limit
To limit the scope for your Change Tracking and Inventory deployment:
Sign in to the Azure portal.
In the Azure portal, navigate to Log Analytics workspaces. Select your workspace from the list.
In your Log Analytics workspace, select Scope Configurations (Preview) from the left-hand menu.
Select the ellipsis to the right of the MicrosoftDefaultScopeConfig-ChangeTracking scope configuration, and select Edit.
In the editing pane, expand Select Computer Groups. The Computer Groups pane shows the saved searches that are added to the scope configuration. The saved search used by Update Management is:
Name Category Alias MicrosoftDefaultComputerGroup ChangeTracking ChangeTracking__MicrosoftDefaultComputerGroup If you added a custom group, it is shown in the list. To deselect it, clear the checkbox to the left of the item. To add a custom group to the scope, select it and then when you are finished with your changes, click Select.
On the Edit scope configuration page, click OK to save your changes.
Next steps
- To work with Change Tracking and Inventory, see Manage Change Tracking and Inventory.
- To troubleshoot general feature issues, see Troubleshoot Change Tracking and Inventory issues.