Azure Monitor Agent Policies do not include server 2022
- Dominant language
- Open Policy Agent
- Stars
- 1.7k
- Forks
- 1.2k
- Avg merge
- 2d 54m
- Merged PRs (30d)
- 3
Description
#### Details of the scenario you tried and the problem that is occurring
I created an Azure Policy Assignment for the initiative Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule and it does not recognize any Windows Server 2022 servers. I ran the Start-AzPolicyComplianceScan cmdlet and it completed successfully, but none of the 2022 server appear as resources.
When I checked the policy definition for the built-in policy Configure Windows virtual machines to run Azure Monitor Agent I saw that the filter for Microsoft.Compute/imageSKU only goes to Server 2019. Since it does not recognize the 2022 servers the agent is not being installed and they are not being added to the data collection rule. The VMs are using the SKU 2022-datacenter-azure-edition.
#### Suggested solution to the issue
Add the Server 2022 skus to the AzureMonitor_Agent_Windows_VM_Deploy and AzureMonitor_Agent_Windows_VM_Audit built-in policies.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the AzureMonitor_Agent_Windows_VM_Deploy and AzureMonitor_Agent_Windows_VM_Audit built-in policy definitions. Inspect their Microsoft.Compute/imageSKU filters and compare them with the reported 2022-datacenter-azure-edition SKU. Done means Windows Server 2022 virtual machines are recognized by the policies and can be included in the Data Collection Rule association.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 38/100