We are currently preparing to deploy a Virtual Machine Scale Set (VMSS) utilizing marketplace Ubuntu images to collect and forward rsyslog and CEF data to a Log Analytics workspace.

Regarding the Azure Monitor Agent (AMA) running on these Ubuntu instances, could you please clarify how updates are managed? Specifically, are these agents patched automatically and on a regular schedule, or do they require manual maintenance from our end?