Stay secure & efficient by migrating from Log Analytics agent-based retired Azure Automation Update Management & Change Tracking & Inventory before February 28, 2025. Follow this blog for required action.
Overview
The legacy Log Analytics (LA) agent, which has played a critical role in transferring data logs for software and applications to Azure, was deprecated on August 31, 2024. Subsequently, all Azure services and solutions relying on the Log Analytics agent for data collection are also being phased out. This transition ensures a seamless shift to more robust replacement products, enhancing continuity, security, and performance for customers' IT estates.
Two of the Azure Automation solutions provided management of machines using the LA agent namely, Azure Automation Update Management for streamline software update deployment & Azure Change Tracking & Inventory for tracking changes and inventory for in-guest environments. These agent-based services were also deprecated on 31st August 2024. Over the last 6 months, these solutions were maintained, giving customers time to move their management processes to the replacement products.
In order to ensure a security posture of the customer environments, these LA agent-based solutions will be completely shut down starting 28th February 2025. You may encounter your existing patching jobs fail and staleness in the changes data in the log analytics workspace after this date. Following captures further details on the impact to operations for the machines that continue to be on these solutions and provides additional guidance.
What will change after 28th February 2025?
a) You will not be able to access both Azure Automation Update Management & Azure Change Tracking & Inventory enabled with the LA agent from the Azure Portal.
b) For Azure Automation Update Management, no new periodic assessments or patching data corresponding to configured machines will be populated.
c) For Change Tracking & Inventory with LA agent, no new changes or inventory logs will be captured.
Note: Historical data for the last 30 days will continue to be available in LA workspace and can be directly queried from the LA tables
|
LA workspace table |
Purpose |
|
ConfigurationData |
To obtain inventory logs for auditing and compliance needs |
|
ConfigurationChange |
To obtain logs corresponding to the changes made in customer environment |
|
Update |
To query periodic assessments and patched updates data for pending updates view |
What next?
If you have any machines configured with legacy version of above-mentioned services, please use one of the following available methods to migrate to replacements products –
|
Product Service |
Product Migration Guidance |
|
Azure Change Tracking & Inventory with LA agent |
a) Migrate to Azure Monitoring Agent (AMA) version of Change Tracking & Inventory – b) If you have enabled File Integrity monitoring (FIM) with LA agent & managing it via Change Tracking & Inventory experience, here are the available options to migrate to -
|
|
Azure Automation Update Management |
Migrate to Azure Update Manager (Does not rely on AMA) |
Additionally, you can refer to these instructions to disable LA agent from your environment. Please feel free to reach out to us on aumpm@microsoft.com for any queries or feedback.
Microsoft