Control: Audit Windows machines on which the Log Analytics agent is not connected as expected
Description
Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if the agent is not installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg returns that it is registered to a workspace other than the ID specified in the policy parameter.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.compute_vm_log_analytics_agent_installed_windowsSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.compute_vm_log_analytics_agent_installed_windows --shareSQL
This control uses a named query:
compute_vm_log_analytics_agent_installed_windows