Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

Install Log Analytics for Azure Sentinel alongside SCOM

Copper Contributor

Hi,

 

We would like to install a log analytics agent for Azure Sentinel on a host on which an SCOM agent is already running. What is the best way to proceed, so that SCOM is still enabled, and Security Events are being forwarded to the log analytics workspace for Sentinel?

 

Thanks in advance!

2 Replies
best response confirmed by Rod_Trent (Microsoft)
Solution

@csmits From the Overview of Azure Monitor agents page: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

 

Log Analytics agent

The Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in Azure, other cloud providers, and on-premises. It collects data into a Log Analytics workspace. The Log Analytics agent is the same agent used by System Center Operations Manager, and you can multihome agent computers to communicate with your management group and Azure Monitor simultaneously. This agent is also required by certain insights and solutions in Azure Monitor.

@Gary Bushey 

 

Could you please share the link to download the binaries for Log Analytics agent (Microsoft Monitoring Agent) which can be upgraded over SCOM Agent.

 

Thanks!

Sreejeet

1 best response

Accepted Solutions
best response confirmed by Rod_Trent (Microsoft)
Solution

@csmits From the Overview of Azure Monitor agents page: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

 

Log Analytics agent

The Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in Azure, other cloud providers, and on-premises. It collects data into a Log Analytics workspace. The Log Analytics agent is the same agent used by System Center Operations Manager, and you can multihome agent computers to communicate with your management group and Azure Monitor simultaneously. This agent is also required by certain insights and solutions in Azure Monitor.

View solution in original post