You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/automation/change-tracking/overview-monitoring-agent.md
+26-40Lines changed: 26 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,15 +3,13 @@ title: Azure Automation Change Tracking and Inventory overview using Azure Monit
3
3
description: This article describes the Change Tracking and Inventory feature using Azure monitoring agent, which helps you identify software and Microsoft service changes in your environment.
4
4
services: automation
5
5
ms.subservice: change-inventory-management
6
-
ms.date: 10/23/2024
6
+
ms.date: 11/14/2024
7
7
ms.topic: overview
8
8
ms.service: azure-automation
9
9
---
10
10
11
11
# Overview of change tracking and inventory using Azure Monitoring Agent
12
12
13
-
**Applies to:**:heavy_check_mark: Windows VMs :heavy_check_mark: Linux VMs :heavy_check_mark: Windows Registry :heavy_check_mark: Windows Files :heavy_check_mark: Linux Files :heavy_check_mark: Windows Software :heavy_check_mark: Windows Services & Linux Daemons
14
-
15
13
> [!Important]
16
14
> - Change Tracking and Inventory using Log Analytics agent has retired on **31 August 2024** and will work on limited support till **01 February 2025**. Follow the guidelines for [migration from Change Tracking and inventory using Log Analytics to Change Tracking and inventory using Azure Monitoring Agent version](guidance-migration-log-analytics-monitoring-agent.md)
17
15
> - We recommend that you use Change Tracking with Azure Monitoring Agent with the Change tracking extension version 2.20.0.0 (or above) to access the GA version of this service.
@@ -23,27 +21,14 @@ This article explains on the latest version of change tracking support using Azu
23
21
> -[FIM with Change Tracking and Inventory using AMA](https://learn.microsoft.com/azure/defender-for-cloud/migrate-file-integrity-monitoring#migrate-from-fim-over-ama).
24
22
> -[FIM with Change Tracking and Inventory using MMA](https://learn.microsoft.com/azure/defender-for-cloud/migrate-file-integrity-monitoring#migrate-from-fim-over-mma).
| Data types | Windows registry </br> Windows services </br> Linux Daemons |
31
+
| Files | Windows </br> Linux |
47
32
48
33
## Key benefits
49
34
@@ -52,23 +37,6 @@ This article explains on the latest version of change tracking support using Azu
52
37
-**Multi-homing experience** – Provides standardization of management from one central workspace. You can [transition from Log Analytics (LA) to AMA](/azure/azure-monitor/agents/azure-monitor-agent-migration) so that all VMs point to a single workspace for data collection and maintenance.
53
38
-**Rules management** – Uses [Data Collection Rules](/azure/azure-monitor/essentials/data-collection-rule-overview) to configure or customize various aspects of data collection. For example, you can change the frequency of file collection.
54
39
55
-
## Current limitations
56
-
57
-
Change Tracking and Inventory using Azure Monitoring Agent doesn't support or has the following limitations:
58
-
59
-
- Recursion for Windows registry tracking
60
-
- Network file systems
61
-
- Different installation methods
62
-
-***.exe** files stored on Windows
63
-
- The **Max File Size** column and values are unused in the current implementation.
64
-
- If you are tracking file changes, it is limited to a file size of 5 MB or less.
65
-
- If the file size appears >1.25MB, then FileContentChecksum is incorrect due to memory constraints in the checksum calculation.
66
-
- If you try to collect more than 2500 files in a 30-minute collection cycle, Change Tracking and Inventory performance might be degraded.
67
-
- If network traffic is high, change records can take up to six hours to display.
68
-
- If you modify a configuration while a machine or server is shut down, it might post changes belonging to the previous configuration.
69
-
- Collecting Hotfix updates on Windows Server 2016 Core RS3 machines.
70
-
- Linux daemons might show a changed state even though no change has occurred. This issue arises because of how the `SvcRunLevels` data in the Azure Monitor [ConfigurationChange](/azure/azure-monitor/reference/tables/configurationchange) table is written.
71
-
- Change Tracking extension doesn't support any hardening standards for any Linux Operating systems or Distros.
72
40
73
41
## Limits
74
42
@@ -210,6 +178,24 @@ The default collection frequency for Windows services is 30 minutes. To configur
210
178
211
179
:::image type="content" source="media/overview-monitoring-agent/frequency-slider-inline.png" alt-text="Screenshot of frequency slider." lightbox="media/overview-monitoring-agent/frequency-slider-expanded.png":::
212
180
181
+
## Current limitations
182
+
183
+
Change Tracking and Inventory using Azure Monitoring Agent doesn't support or has the following limitations:
184
+
185
+
- Recursion for Windows registry tracking
186
+
- Network file systems
187
+
- Different installation methods
188
+
-***.exe** files stored on Windows
189
+
- The **Max File Size** column and values are unused in the current implementation.
190
+
- If you are tracking file changes, it is limited to a file size of 5 MB or less.
191
+
- If the file size appears >1.25MB, then FileContentChecksum is incorrect due to memory constraints in the checksum calculation.
192
+
- If you try to collect more than 2500 files in a 30-minute collection cycle, Change Tracking and Inventory performance might be degraded.
193
+
- If network traffic is high, change records can take up to six hours to display.
194
+
- If you modify a configuration while a machine or server is shut down, it might post changes belonging to the previous configuration.
195
+
- Collecting Hotfix updates on Windows Server 2016 Core RS3 machines.
196
+
- Linux daemons might show a changed state even though no change has occurred. This issue arises because of how the `SvcRunLevels` data in the Azure Monitor [ConfigurationChange](/azure/azure-monitor/reference/tables/configurationchange) table is written.
197
+
- Change Tracking extension doesn't support any hardening standards for any Linux Operating systems or Distros.
0 commit comments