{"id":2592,"date":"2021-03-02T02:00:00","date_gmt":"2021-03-02T02:00:00","guid":{"rendered":"https:\/\/hypervlab.co.uk\/?p=2592"},"modified":"2021-12-10T14:44:24","modified_gmt":"2021-12-10T14:44:24","slug":"md101-azure-log-analytics-and-microsoft-monitoring","status":"publish","type":"post","link":"https:\/\/hypervlab.co.uk\/?p=2592","title":{"rendered":"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring"},"content":{"rendered":"Reading Time: <\/span> 4<\/span> minutes<\/span><\/span>\n

So, MD100 has been done and put to bed. The next exam for the Microsoft 365 Certified: Modern Desktop Administrator Associate is MD101 : Managing Modern Desktops<\/a>. While running thought some Mock Exams form Udemy, I got this question.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

So in terms of learning and personal development, and with it being MS Ignite this week, I decided to have a look into it and setup an Azure Subscription and have a play with the deployment types form a manual install and automated install from Intune.<\/p>\n\n\n\n

Deploying Microsoft Monitoring Agent \u2013 Direct to Server\/PC.<\/h3>\n\n\n\n

docs.microsoft.com \u2013 Install Log Analytics agent on Windows computers \u2013 Azure Monitor | Microsoft Docs<\/a><\/p>\n\n\n\n

Deploying Microsoft Monitoring Agent \u2013 Manual Installation.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

From the Log Analytics Portal select Agent Management<\/em>.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Download the Windows Agent.<\/p>\n\n\n\n

Installing <\/strong>Microsoft Monitoring Agent \u2013 Manually<\/h2>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

Click \u2018Next\u2019.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Click \u2018I Agree\u2019.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Choose the Installation Location and click \u2018Next\u2019.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Ensure that the option for Connect to Azure Log Analytics is checked. [X]<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

The Workspace ID and Primary Key can be located from the Agent download screen.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

Click \u2018Install\u2019.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Installation Process takes place.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Microsoft Monitoring Agent Manual installation is Complete.<\/p>\n\n\n\n

Installing <\/strong>Microsoft Monitoring Agent \u2013 Intune<\/h2>\n\n\n\n

From the Log Analytics Portal, Download the Windows Agent.
You will also want to visit the Microsoft-Win32-Content-Prep-Tool<\/a> Github Page and download the App Packager for Win32Apps. This is how I have the Structure setup under C:\\AutoPilot<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

From a Powershell Windows Launch the file with the following Command to extract the contents to C:\\AutoPilot\\Package.<\/p>\n\n\n\n

.\\MMASetup-AMD64.exe \/C<\/code><\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Once the application extraction has completed this is what the source folders should look like.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

Then from an Administrative PowerShell Window, you want to run .\\IntuneWinAppUtil.exe<\/em><\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Win32 Application Created.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Next, we want to upload the Win32App File into Intune. From the Microsoft EndPoint Manager Portal, You want to navigate to Apps > Windows and select \u2018+ Add\u2019<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Click \u2018Next\u2019<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Select the \u2018MMASetup-AMD64.intunewin\u2019 File and upload to Intune<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Click \u2018Next\u2019<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
For the Install Commands, You will want to visit the Install Log Analytics agent <\/a>docs.microsoft.com article to copy the install Command, You will need your Log Workspace ID and Primary Key.<\/p>\n\n\n\n
setup.exe \/qn NOAPM=1 ADD_OPINSIGHTS_WORKSPACE=1 OPINSIGHTS_WORKSPACE_AZURE_CLOUD_TYPE=0 OPINSIGHTS_WORKSPACE_ID=\"<your workspace ID>\" OPINSIGHTS_WORKSPACE_KEY=\"<your workspace key>\" AcceptEndUserLicenseAgreement=1<\/code><\/pre>\n\n\n\n
For the Uninstall Command, You can fireup RegEdit. Navigate to:<\/p>\n\n\n\n
Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{88EE688B-31C6-4B90-90DF-FBB345223F94}<\/code><\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
From here you can copy the UninstallString. Once complete this is what it should look like.
** NOTE<\/strong> ** At time of posting the Product Version was: 10.20.18053.0<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Run though the final steps for the App Setup. \u2013 Requirements<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Detection Rules.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Dependencies.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Supersedence.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Assignment.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Review and Create.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
App Completed, Run a Sync on your AutoPilot Device and the new application should be detected and start installing. If the application is successful under the control panel you should see an option for Microsoft Monitoring Agent.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
From the Agent Management Portal, You should also see<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"
Reading Time: <\/span>  4<\/span> minutes<\/span><\/span>So, MD100 has been done and put to bed. The next exam for the Microsoft 365 Certified: Modern Desktop Administrator Associate is MD101 : Managing Modern Desktops. While running thought some Mock Exams form Udemy, I got this question. So in terms of learning and personal development, and with it being MS Ignite this week, I […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[260],"tags":[303,287,308,247,305],"class_list":["post-2592","post","type-post","status-publish","format-standard","hentry","category-m365-modern-desktop-administrator-associate-md-101","tag-applications","tag-intune","tag-logging","tag-monitoring","tag-win32app"],"yoast_head":"\nMD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hypervlab.co.uk\/?p=2592\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB\" \/>\n<meta property=\"og:description\" content=\"Reading Time:  4 minutesSo, MD100 has been done and put to bed. The next exam for the Microsoft 365 Certified: Modern Desktop Administrator Associate is MD101 : Managing Modern Desktops. While running thought some Mock Exams form Udemy, I got this question. So in terms of learning and personal development, and with it being MS Ignite this week, I […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hypervlab.co.uk\/?p=2592\" \/>\n<meta property=\"og:site_name\" content=\"HypervLAB\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-02T02:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-10T14:44:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png\" \/>\n<meta name=\"author\" content=\"Simon Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/smoon_lee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592\",\"url\":\"https:\/\/hypervlab.co.uk\/?p=2592\",\"name\":\"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB\",\"isPartOf\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage\"},\"thumbnailUrl\":\"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png\",\"datePublished\":\"2021-03-02T02:00:00+00:00\",\"dateModified\":\"2021-12-10T14:44:24+00:00\",\"author\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\"},\"breadcrumb\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hypervlab.co.uk\/?p=2592\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage\",\"url\":\"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png\",\"contentUrl\":\"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2592#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hypervlab.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hypervlab.co.uk\/#website\",\"url\":\"https:\/\/hypervlab.co.uk\/\",\"name\":\"HypervLAB\",\"description\":\"Blogging about all thing Microsoft\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hypervlab.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\",\"name\":\"Simon Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"caption\":\"Simon Lee\"},\"description\":\"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \\\"hypervlab\\\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.\",\"sameAs\":[\"https:\/\/hypervlab.co.uk\",\"https:\/\/www.linkedin.com\/in\/simon-john-lee\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee\"],\"url\":\"https:\/\/hypervlab.co.uk\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hypervlab.co.uk\/?p=2592","og_locale":"en_GB","og_type":"article","og_title":"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB","og_description":"Reading Time:  4 minutesSo, MD100 has been done and put to bed. The next exam for the Microsoft 365 Certified: Modern Desktop Administrator Associate is MD101 : Managing Modern Desktops. While running thought some Mock Exams form Udemy, I got this question. So in terms of learning and personal development, and with it being MS Ignite this week, I […]","og_url":"https:\/\/hypervlab.co.uk\/?p=2592","og_site_name":"HypervLAB","article_published_time":"2021-03-02T02:00:00+00:00","article_modified_time":"2021-12-10T14:44:24+00:00","og_image":[{"url":"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png","type":"","width":"","height":""}],"author":"Simon Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/smoon_lee","twitter_misc":{"Written by":"Simon Lee","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hypervlab.co.uk\/?p=2592","url":"https:\/\/hypervlab.co.uk\/?p=2592","name":"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring - HypervLAB","isPartOf":{"@id":"https:\/\/hypervlab.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage"},"image":{"@id":"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage"},"thumbnailUrl":"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png","datePublished":"2021-03-02T02:00:00+00:00","dateModified":"2021-12-10T14:44:24+00:00","author":{"@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359"},"breadcrumb":{"@id":"https:\/\/hypervlab.co.uk\/?p=2592#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hypervlab.co.uk\/?p=2592"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/?p=2592#primaryimage","url":"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png","contentUrl":"https:\/\/web.archive.org\/web\/20210419091944im_\/https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2021\/03\/image-27.png"},{"@type":"BreadcrumbList","@id":"https:\/\/hypervlab.co.uk\/?p=2592#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hypervlab.co.uk\/"},{"@type":"ListItem","position":2,"name":"MD101 \u2013 Azure Log Analytics and Microsoft Monitoring"}]},{"@type":"WebSite","@id":"https:\/\/hypervlab.co.uk\/#website","url":"https:\/\/hypervlab.co.uk\/","name":"HypervLAB","description":"Blogging about all thing Microsoft","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hypervlab.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359","name":"Simon Lee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","caption":"Simon Lee"},"description":"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \"hypervlab\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.","sameAs":["https:\/\/hypervlab.co.uk","https:\/\/www.linkedin.com\/in\/simon-john-lee\/","https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee"],"url":"https:\/\/hypervlab.co.uk\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2592","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2592"}],"version-history":[{"count":0,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2592\/revisions"}],"wp:attachment":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2592"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2592"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}