Forum Discussion
PatrikHansson
Jul 17, 2020Brass Contributor
No Security Alerts ProtectionStatus table missing
Hi
I have enabled Security Center Standard on one of my subscriptions that already had Log analytics set up for the VM's so I don't want to enable auto provisioning in Security Center.
"Endpoint Protection not installed on Azure VMs" status has been remediated and is green.
I tested the alert by using this
https://docs.microsoft.com/en-us/azure/security-center/security-center-alert-validation#validate-alerts-on-windows-vms-
But I see no alerts.
I've also checked the log analytics workspace that the computers are connected to (two different) and neither of them have the ProtectionStatus table present.
So I'm trying to figure out what step is missing.
- PatrikHanssonBrass Contributor
Can answer my own question after some testing. You have to enable the standard tier on the Log analytics workspace as well as the subscription. Couldn't find any clear documentation on this but after I did it for the workspace my azure vm was connected to it works.