securitycenter_automatic_provisioning_monitoring_agent_on.sql

select
  -- Required Columns
  sc_prov.id as resource,
  case
    when auto_provision = 'On' then 'ok'
    else 'alarm'
  end as status,
  case
    when auto_provision = 'On' then 'Automatic provisioning of monitoring agent is on.'
    else 'Automatic provisioning of monitoring agent is off.'
  end as reason,
  -- Additional Dimensions
  sub.display_name as subscription
from
  azure_security_center_auto_provisioning sc_prov
  right join azure_subscription sub on sc_prov.subscription_id = sub.subscription_id;