search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.29k stars 21.47k forks source link

"No recent data" troubleshooting #15386

Closed andrewatfornax closed 5 years ago

andrewatfornax commented 6 years ago

Currently, I have a number of VMs that report "No recent data". This is not an error listed above, and so it is not clear how to troubleshoot this issue.

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

SaurabhSharma-MSFT commented 6 years ago

@andrewatfornax Thanks for your feedback! We will investigate and update as appropriate.

SaurabhSharma-MSFT commented 6 years ago

@andrewatfornax Thanks for the feedback ! I have assigned this issue to content author to investigate and update the document as appropriate.

rkarlin commented 6 years ago

Hi @andrewatfornax . Thanks for bringing this to my attention. I'm researching it and will update you and the article when I have an answer - it may take a couple of days because most of the team is attending the Ignite conference all week. thanks!

andrewatfornax commented 6 years ago

Hi @rkarlin,

If it helps, I have found out that one reason why "No recent data" may appear is that - although the monitoring agent is installed and working on the VMs, and the agent is correctly connected to the Security Center OMS instance - if you have manually supplied your own OMS instance for this (instead of using one created by the setup wizard in Security Center), the "Security" solution may not have been deployed for that OMS instance.

It appears that this solution must be deployed to the OMS instance used for collecting the VM data, otherwise "No recent data" shows up in Security Center.

The requirement for this solution to be present may be documented somewhere, but clearly I missed it, and having this suggestion on the troubleshooting page would definitely have helped.

Thanks!

YutongTie-MSFT commented 6 years ago

@rkarlin Hi, any update on this? Thanks!

allirreza commented 5 years ago

@andrewatfornax Thanks for the feedback ! I have assigned this issue to content author to investigate and update the document as appropriate.

Hi @SaurabhSharma-MSFT ,

We have the same problem in our VM's. Especially, we get "No Recent Data" for security configurations scan. Is there any update on this?

rkarlin commented 5 years ago

Hi @andrewatfornax and @allirreza Please take a look here: https://docs.microsoft.com/azure/security-center/security-center-enable-data-collection#manual-agent-provisioning-a-namemanualagenta

I think that the information here about Manual agent provisioning will answer your questions. If that doesn't help, please contact support. thanks, Rachel

rkarlin commented 5 years ago

please-close

andrewatfornax commented 5 years ago

Hi @rkarlin,

Thank you for this. However, I think you have missed an opportunity to improve the documentation here.

My initial ticket was about the fact the troubleshooting document did not have a section to cover what to do when the "No recent data" message appears. As far as I can see, this is still the case - and including a section on how to troubleshoot this issue would be helpful, as evidenced by the fact other users have found my ticket and have said "me too"!

As it turns out, I managed to resolve the issue (and please note that the section you have linked to re: manually provisioning the agent has absolutely nothing to do with the "No recent data" message); nevertheless, adding the message to the troubleshooting guide, and providing some helpful steps/information on what to do when you get this message would help others.

please-open-again

rkarlin commented 5 years ago

@andrewatfornax Hi, I'm sorry I wasn't more clear. I will definitely incorporate some troubleshooting for No recent data in one of our upcoming releases. thanks again for your feedback.

allirreza commented 5 years ago

Hi @rkarlin, I agree with @andrewatfornax. I didn't find any related information for "No recent data" and reinstalled the all agent again. The problem is solved for servers and after a couple of days again we got this message for some of them without changing anything else. As you mentioned, it would be nice if you elaborate on this on the document to give us more insight about behind the scene. Thanks.

rkarlin commented 5 years ago

@allirreza thanks for the feedback - I've added it to my list and will be sure we cover it in a release in the near future.

allirreza commented 5 years ago

@rkarlin Thank you for the quick response. Good luck.

rkarlin commented 5 years ago

@allirreza thanks!

andrewatfornax commented 5 years ago

Thanks @rkarlin! Great news.

brgsstm commented 5 years ago

Documentation still not updated to reflect the "No recent data issue"? Any chance this is related to the VMs already reporting into on premise SCOM?

rkarlin commented 5 years ago

That seems unlikely. Please open a support ticket to troubleshoot this issue. Thanks.