AzPolicyAdvertizer

last sync: 2025-Jun-20 17:23:43 UTC

Configure Log Analytics extension on Azure Arc enabled Linux servers. See deprecation notice below

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure Log Analytics extension on Azure Arc enabled Linux servers. See deprecation notice below

9d2b61b4-1d14-4a63-be30-d4498e7ad2cf

Version

2.1.1
Details on versioning

Versioning

Versions supported for Versioning: 1
2.1.1
Built-in Versioning [Preview]

Category

Monitoring
Microsoft Learn

Description

Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Log Analytics virtual machine extension. VM insights uses the Log Analytics agent to collect the guest OS performance data, and provides insights into their performance. See more - https://aka.ms/vminsightsdocs. Deprecation notice: The Log Analytics agent is on a deprecation path and won't be supported after August 31, 2024. You must migrate to the replacement 'Azure Monitor agent' prior to that date

Cloud environments

AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown

Available in AzUSGov

The Policy is available in AzureUSGovernment cloud. Version: '2.1.1'
Repository: Azure-Policy 9d2b61b4-1d14-4a63-be30-d4498e7ad2cf

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Log Analytics Contributor	92aaf0da-9dab-42b6-94a3-d43ce8d16293

Rule aliases

IF (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.HybridCompute/machines/osName	Microsoft.HybridCompute	machines	properties.osName	True		False

THEN-ExistenceCondition (3)

Alias	Namespace	ResourceType	Path	PathIsDefault	Modifiable
Microsoft.HybridCompute/machines/extensions/provisioningState	Microsoft.HybridCompute	machines/extensions	properties.provisioningState	True	False
Microsoft.HybridCompute/machines/extensions/publisher	Microsoft.HybridCompute	machines/extensions	properties.publisher	True	False
Microsoft.HybridCompute/machines/extensions/type	Microsoft.HybridCompute	machines/extensions	properties.type	True	False

Rule resource types

IF (1)

Microsoft.HybridCompute/machines

THEN-Deployment (1)

Microsoft.HybridCompute/machines/extensions

Compliance

Not a Compliance control

Initiatives usage

Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

Legacy - Enable Azure Monitor for VMs	55f3eceb-5573-4f18-9695-226972c6d74a	Monitoring	GA	BuiltIn	true

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-08-09 17:24:03	change	Patch (2.1.0 > 2.1.1)
2022-07-08 16:32:07	change	Minor (2.0.1 > 2.1.0)
2021-09-27 15:52:17	change	Patch (2.0.0 > 2.0.1)
2021-07-30 15:17:20	change	Major (1.2.0 > 2.0.0)
2021-04-27 15:38:15	change	Minor, old suffix: preview (1.1.0-preview > 1.2.0)
2020-05-29 15:39:09	add	9d2b61b4-1d14-4a63-be30-d4498e7ad2cf

JSON compare

compare mode: version left: version right:

2.1.0 → 2.1.1 RENAMED Viewed

@@ -1,11 +1,11 @@
 {
-    "displayName": "Configure Log Analytics extension on Azure Arc enabled Linux servers",
     "policyType": "BuiltIn",
     "mode": "Indexed",
-    "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Log Analytics virtual machine extension. VM insights uses the Log Analytics agent to collect the guest OS performance data, and provides insights into their performance. See more - https://aka.ms/vminsightsdocs.",
     "metadata": {
-        "version": "2.1.0",
         "category": "Monitoring"
     },
     "parameters": {
         "logAnalytics": {

 {
+    "displayName": "Configure Log Analytics extension on Azure Arc enabled Linux servers. See deprecation notice below",
     "policyType": "BuiltIn",
     "mode": "Indexed",
+    "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Log Analytics virtual machine extension. VM insights uses the Log Analytics agent to collect the guest OS performance data, and provides insights into their performance. See more - https://aka.ms/vminsightsdocs. Deprecation notice: The Log Analytics agent is on a deprecation path and won't be supported after August 31, 2024. You must migrate to the replacement 'Azure Monitor agent' prior to that date",
     "metadata": {
+        "version": "2.1.1",
         "category": "Monitoring"
     },
     "parameters": {
         "logAnalytics": {

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Configure Log Analytics extension on Azure Arc enabled Linux servers. See deprecation notice below",
policyType: "BuiltIn",
mode: "Indexed",
description: "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Log Analytics virtual machine extension. VM insights uses the Log Analytics agent to collect the guest OS performance data, and provides insights into their performance. See more - https://aka.ms/vminsightsdocs. Deprecation notice: The Log Analytics agent is on a deprecation path and won't be supported after August 31, 2024. You must migrate to the replacement 'Azure Monitor agent' prior to that date",
metadata: {2 itemsversion: "2.1.1",
category: "Monitoring"
},
parameters: {2 itemslogAnalytics: {2 itemstype: "String",
metadata: {4 itemsdisplayName: "Log Analytics workspace",
description: "Specify the Log Analytics workspace the agent should be connected to. If this workspace is outside of the scope of the assignment you must manually grant 'Log Analytics Contributor' permissions (or similar) to the policy assignment's principal ID.",
strongType: "omsWorkspace",
assignPermissions: true
}
},
effect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.HybridCompute/machines"
},
{2 itemsfield: "Microsoft.HybridCompute/machines/osName",
equals: "linux"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {4 itemstype: "Microsoft.HybridCompute/machines/extensions",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293" Log Analytics Contributor 
],
existenceCondition: {1 itemallOf: [3 items{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/type",
equals: "OmsAgentForLinux"
},
{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/publisher",
equals: "Microsoft.EnterpriseCloud.Monitoring"
},
{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/provisioningState",
notEquals: "Failed"
}
]
},
deployment: {1 itemproperties: {3 itemsmode: "incremental",
template: {6 items$schema: "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {3 itemsvmName: {1 itemtype: "string"
},
location: {1 itemtype: "string"
},
logAnalytics: {1 itemtype: "string"
}
},
variables: {3 itemsvmExtensionName: "OMSAgentForLinux",
vmExtensionPublisher: "Microsoft.EnterpriseCloud.Monitoring",
vmExtensionType: "OmsAgentForLinux"
},
resources: [1 item{5 itemsname: 🔍"[
    concat(
        parameters('vmName'),
       '/',
         variables(
           'vmExtensionName'
        )
    )
]",
type: "Microsoft.HybridCompute/machines/extensions",
location: "[parameters('location')]",
apiVersion: "2019-12-12",
properties: {4 itemspublisher: "[variables('vmExtensionPublisher')]",
type: "[variables('vmExtensionType')]",
settings: {2 itemsworkspaceId: 🔍"[
    reference(
        parameters('logAnalytics'),
       '2015-03-20'
    ).customerId
]",
stopOnMultipleConnections: "true"
},
protectedSettings: {1 itemworkspaceKey: 🔍"[
    listKeys(
        parameters('logAnalytics'),
       '2015-03-20'
    ).primarySharedKey
]"
}
}
}
],
outputs: {1 itempolicy: {2 itemstype: "string",
value: 🔍"[
    concat(
       'Enabled extension for VM',
        ':',
         parameters('vmName')
    )
]"
}
}
},
parameters: {3 itemsvmName: {1 itemvalue: "[field('name')]"
},
location: {1 itemvalue: "[field('location')]"
},
logAnalytics: {1 itemvalue: "[parameters('logAnalytics')]"
}
}
}
}
}
}
}
}

Configure Log Analytics extension on Azure Arc enabled Linux servers. See deprecation notice below

Azure BuiltIn Policy definition

TableFilter v0.7.3