Configure Monitoring of an Azure VM using OMS

In this Configure Monitoring of an Azure VM using OMS IT Pro Challenge, learners will understand how to configure monitoring of an Azure virtual machine using the OMS service. In the process, they will learn how to evaluate and implement IT security assessments, and monitoring and optimizing system/server performance. By taking this lab, learners will learn the building blocks of how to monitor system operations and react to events in response to pre-set triggers. These skills are useful to anyone pursuing a career in cybersecurity as a system administrator.

Overview

The Azure Operations Management Suite (OMS) is a management tool that comprises four services: Backup, Site Recovery, Log Analytics, and Automation.

For the purposes of this lab, you are the system administrator for your company, and they need you to migrate virtual machines to Azure. You will use Log Analytics to monitor both on-premises and Azure systems and configure a monitoring solution. To accomplish your goal, you will first configure a Log Analytics workspace so that you can create performance counters and log events. You will need to install the Microsoft Monitoring Agent to collect data for you to analyze.

Create a Log Analytics resource

A Log Analytics resource is used to collect data from many sources. You can create rules and settings for analyzing the log data from these sources.

In order to create a Log Analytics resource, you need to sign in to the Azure portal and create a workspace. Make sure that you can display the workspace under the Log Analytics workspaces.

Configure a Log Analytics solution

The Azure Log Analytics Agent Health solution provides information about the health and performance of all the agents in a workspace.

To configure a Log Analytics solution, you need to add the Azure Log Analytics Agent Health solution. You then need to create custom events and add performance counters.

Install the Microsoft Monitoring Agent

If you are using a virtual machine, you need to install the Microsoft Monitoring Agent in order to collect data and monitor the performance of the virtual machine.

In order to install the Microsoft Monitoring Agent, you need to login to the Azure portal and connect to the virtual machine and view the Advanced settings for the workspace. Install the 64-bit Windows Agent and then confirm that you have connected a Windows computer.

Review monitoring data

Azure uses heartbeats to monitor the communication between the agent and the server. A heartbeat message is a collection of these communications that are sent at set intervals (default = 60 seconds) from the agent to the management server.

To review the monitoring data, you need to confirm that you see at least one Heartbeat message in the log search and that there is one agent associated with a system in the United States.

Summary Conclusion

By taking this virtual lab, you will learn about some of the services in OMS, how to install, configure, and create a Log Analytics workspace, install the Azure Log Analytics Agent Health solution and the Microsoft Monitoring Agent so that you can monitor data.