Automate onboarding
To improve the efficiency of deploying Azure server management services, consider automating deployment as discussed in previous sections of this guidance. The script and the example templates provided in the following sections are starting points for developing your own automation of onboarding processes.
This guidance is supported by a GitHub repository of sample code. The repository provides example scripts and Azure Resource Manager templates to help you automate the deployment of Azure server management services.
The sample files illustrate how to use Azure PowerShell cmdlets to automate the following tasks:
Create a Log Analytics workspace. (Or, use an existing workspace if it meets the requirements. For details, see Workspace planning.
Create an Azure Automation account, or use an existing account that meets the requirements. For more information, see Workspace planning.
Link the Automation account and the Log Analytics workspace. This step isn't required if you're onboarding by using the Azure portal.
Enable the Update Management solution and the Change Tracking and Inventory solution for the workspace.
Onboard Azure VMs by using Azure Policy. A policy installs the Log Analytics agent and the Microsoft Dependency Agent on the Azure VMs.
Auto-enable Azure Backup for VMs using Azure Policy
Onboard on-premises servers by installing the Log Analytics agent on them.
The files described in the following table are used in this sample. You can customize them to support your own deployment scenarios.
| File name | Description |
|---|---|
New-AMSDeployment.ps1 |
The main, orchestrating script that automates onboarding. It creates resource groups, and location, workspace, and Automation accounts, if they don't exist already. This PowerShell script requires an existing subscription. |
Workspace-AutomationAccount.json |
A Resource Manager template that deploys the workspace and Automation account resources. |
WorkspaceSolutions.json |
A Resource Manager template that enables the solutions you want in the Log Analytics workspace. |
ScopeConfig.json |
A Resource Manager template that uses the opt-in model for on-premises servers with the Change Tracking and Inventory solution. Using the opt-in model is optional. |
Enable-VMInsightsPerfCounters.ps1 |
A PowerShell script that enables Azure Monitor for VMs and configures performance counters. |
ChangeTracking-FileList.json |
A Resource Manager template that defines the list of files that will be monitored by change tracking. |
Use the following command to run New-AMSDeployment.ps1:
.\New-AMSDeployment.ps1 -SubscriptionName '{Subscription Name}' -WorkspaceName '{Workspace Name}' -WorkspaceLocation '{Azure Location}' -AutomationAccountName {Account Name} -AutomationAccountLocation {Account Location}
Next steps
Learn how to set up basic alerts to notify your team of key management events and issues.