Skip to content

Latest commit

 

History

History
117 lines (75 loc) · 5.42 KB

change-tracking.md

File metadata and controls

117 lines (75 loc) · 5.42 KB
title description services ms.service ms.subservice author ms.author ms.date ms.topic manager
Troubleshoot Azure Automation Change Tracking and Inventory issues
This article tells how to troubleshoot and resolve issues with the Azure Automation Change Tracking and Inventory feature.
automation
automation
change-inventory-management
mgoedtel
magoedte
01/31/2019
conceptual
carmonm

Troubleshoot Change Tracking and Inventory issues

This article describes how to troubleshoot and resolve Azure Automation Change Tracking and Inventory issues. For general information about Change Tracking and Inventory, see Change Tracking and Inventory overview.

Windows

Scenario: Change Tracking and Inventory records aren't showing for Windows machines

Issue

You don't see any Change Tracking and Inventory results for Windows machines that have been enabled for the feature.

Cause

This error can have the following causes:

  • The Azure Log Analytics agent for Windows isn't running.
  • Communication back to the Automation account is being blocked.
  • The Change Tracking and Inventory management packs aren't downloaded.
  • The VM being enabled might have come from a cloned machine that wasn't prepared with System Preparation (sysprep) with the Log Analytics agent for Windows installed.

Resolution

On the Log Analytics agent machine, go to C:\Program Files\Microsoft Monitoring Agent\Agent\Tools and run the following commands:

net stop healthservice
StopTracing.cmd
StartTracing.cmd VER
net start healthservice

If you still need help, you can collect diagnostics information and contact support.

Note

The Log Analytics agent enables error tracing by default. To enable verbose error messages as in the preceding example, use the VER parameter. For information traces, use INF when you invoke StartTracing.cmd.

Log Analytics agent for Windows not running

Verify that the Log Analytics agent for Windows (HealthService.exe) is running on the machine.

Communication to Automation account blocked

Check Event Viewer on the machine, and look for any events that have the word changetracking in them.

To learn about addresses and ports that must be allowed for Change Tracking and Inventory to work, see Network planning.

Management packs not downloaded

Verify that the following Change Tracking and Inventory management packs are installed locally:

  • Microsoft.IntelligencePacks.ChangeTrackingDirectAgent.*
  • Microsoft.IntelligencePacks.InventoryChangeTracking.*
  • Microsoft.IntelligencePacks.SingletonInventoryCollection.*
VM from cloned machine that has not been sysprepped

If using a cloned image, sysprep the image first and then install the Log Analytics agent for Windows.

Linux

Scenario: No Change Tracking and Inventory results on Linux machines

Issue

You don't see any Change Tracking and Inventory results for Linux machines that are enabled for the feature.

Cause

Here are possible causes specific to this issue:

  • The Log Analytics agent for Linux isn't running.
  • The Log Analytics agent for Linux isn't configured correctly.
  • There are file integrity monitoring (FIM) conflicts.

Resolution

Log Analytics agent for Linux not running

Verify that the daemon for the Log Analytics agent for Linux (omsagent) is running on your machine. Run the following query in the Log Analytics workspace that's linked to your Automation account.

Heartbeat
| summarize by Computer, Solutions

If you don't see your machine in query results, it hasn't recently checked in. There's probably a local configuration issue and you should reinstall the agent. For information about installation and configuration, see Collect log data with the Log Analytics agent.

If your machine shows up in the query results, verify the scope configuration. See Targeting monitoring solutions in Azure Monitor.

For more troubleshooting of this issue, see Issue: You are not seeing any Linux data.

Log Analytics agent for Linux not configured correctly

The Log Analytics agent for Linux might not be configured correctly for log and command-line output collection by using the OMS Log Collector tool. See Change Tracking and Inventory overview.

FIM conflicts

Azure Security Center's FIM feature might be incorrectly validating the integrity of your Linux files. Verify that FIM is operational and correctly configured for Linux file monitoring. See Change Tracking and Inventory overview.

Next steps

If you don't see your problem here or you can't resolve your issue, try one of the following channels for additional support:

  • Get answers from Azure experts through Azure Forums.
  • Connect with @AzureSupport, the official Microsoft Azure account for improving customer experience. Azure Support connects the Azure community to answers, support, and experts.
  • File an Azure support incident. Go to the Azure Support site, and select Get Support.