Skip to content

Commit 8f3186a

Browse files
authored
Merge pull request #50950 from hestolz/patch-4
Update OMS Endpoints
2 parents 99cc401 + d87e292 commit 8f3186a

File tree

2 files changed

+10
-13
lines changed

2 files changed

+10
-13
lines changed

articles/azure-monitor/platform/agent-linux-troubleshoot.md

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -153,15 +153,8 @@ Below the output plugin, uncomment the following section by removing the `#` in
153153
`/opt/microsoft/omsagent/bin/omsadmin.sh -w <Workspace ID> -s <Workspace Key> -p <Proxy Conf> -v`
154154

155155
2. Review the section [Update proxy settings](agent-manage.md#update-proxy-settings) to verify you have properly configured the agent to communicate through a proxy server.
156-
* Double check that the following Azure Monitor endpoints are whitelisted:
157156

158-
|Agent Resource| Ports | Direction |
159-
|------|---------|----------|
160-
|*.ods.opinsights.azure.com | Port 443| Inbound and outbound |
161-
|*.oms.opinsights.azure.com | Port 443| Inbound and outbound |
162-
|*.blob.core.windows.net | Port 443| Inbound and outbound |
163-
164-
If you plan to use the Azure Automation Hybrid Runbook Worker to connect to and register with the Automation service to use runbooks or management solutions in your environment, it must have access to the port number and the URLs described in [Configure your network for the Hybrid Runbook Worker](../../automation/automation-hybrid-runbook-worker.md#network-planning).
157+
3. Double-check that the endpoints outlined in the Azure Monitor [network firewall requirements](log-analytics-agent.md#firewall-requirements) list are added to an allow list correctly. If you use Azure Automation, the necessary network configuration steps are linked above as well.
165158

166159
## Issue: You receive a 403 error when trying to onboard
167160

articles/azure-monitor/platform/log-analytics-agent.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -156,20 +156,24 @@ The agent for Linux and Windows communicates outbound to the Azure Monitor servi
156156

157157
![Log Analytics agent communication diagram](./media/log-analytics-agent/log-analytics-agent-01.png)
158158

159+
The following table lists the proxy and firewall configuration information that's required for the Linux and Windows agents to communicate with Azure Monitor logs.
159160

160-
## Network firewall requirements
161-
The information below list the proxy and firewall configuration information required for the Linux and Windows agent to communicate with Azure Monitor logs.
161+
### Firewall requirements
162162

163163
|Agent Resource|Ports |Direction |Bypass HTTPS inspection|
164164
|------|---------|--------|--------|
165-
|*.ods.opinsights.azure.com |Port 443 |Outbound|Yes |
166-
|*.oms.opinsights.azure.com |Port 443 |Outbound|Yes |
167-
|*.blob.core.windows.net |Port 443 |Outbound|Yes |
165+
|*.ods.opinsights.azure.com |Port 443 |Inbound and Outbound|Yes |
166+
|*.oms.opinsights.azure.com |Port 443 |Inbound and Outbound|Yes |
167+
|*.blob.core.windows.net |Port 443 |Inbound and Outbound|Yes |
168+
|*.azure-automation.net |Port 443 |Inbound and Outbound|Yes |
169+
|*.azure.com |Port 443|Inbound and Outbound|Yes |
168170

169171
For firewall information required for Azure Government, see [Azure Government management](../../azure-government/documentation-government-services-monitoringandmanagement.md#azure-monitor-logs).
170172

171173
If you plan to use the Azure Automation Hybrid Runbook Worker to connect to and register with the Automation service to use runbooks or management solutions in your environment, it must have access to the port number and the URLs described in [Configure your network for the Hybrid Runbook Worker](../../automation/automation-hybrid-runbook-worker.md#network-planning).
172174

175+
### Proxy configuration
176+
173177
The Windows and Linux agent supports communicating either through a proxy server or Log Analytics gateway to Azure Monitor using the HTTPS protocol. Both anonymous and basic authentication (username/password) are supported. For the Windows agent connected directly to the service, the proxy configuration is specified during installation or [after deployment](agent-manage.md#update-proxy-settings) from Control Panel or with PowerShell.
174178

175179
For the Linux agent, the proxy server is specified during installation or [after installation](agent-manage.md#update-proxy-settings) by modifying the proxy.conf configuration file. The Linux agent proxy configuration value has the following syntax:

0 commit comments

Comments
 (0)