How to script adding a second workspace to OMS/ALA

[vboyev-MSFT]

Scenario: MMA is deployed. Servers are connected to SCOM as well as to ALA workspace. Need to script an additional workspace.

This scenario is not documented. How do you add an additional workspace key and ID while preserving the existing configuration programmatically?

Also, how do you programmatically remove a single workspace if multiple are defined?

This becoming a common scenario with customers enrolling in services such as MDATP and ALA/ASC etc....

Azure documentation issue guidance

Thanks for opening an issue in the Azure technical documentation repository.

We use GitHub issues as the primary channel for customer and community feedback about the Azure documentation.

Creating an issue

We prefer that you create documentation feedback issues using the Feedback link on the published article - the feedback control on the doc page creates an issue that contains all the article details so you can focus on the feedback part.

You can also create a feedback issue here in the repo. If you do this, please make sure your issue lists:

• [ ] The relevant Azure service or technology.
• [ ] A link to the published documentation article that you have feedback about.
• [ ] Clear, specific feedback that the author can act on.

Pull requests and article contributions

If you know the change that is needed in an article, we encourage you to submit the changes directly using a pull request. If the change is large, or if you want to contribute an entire article, follow these guidelines:

• [ ] Don't surprise us with a big pull request or a pull request with a new article! Submit an issue that describes the details of the proposed large change or new article.
• [ ] Include the service or technology area.

We'll route the issue to the appropriate content team for review and discussion.

Tech support and product feedback

If you would like to contact Microsoft about other things, such as product feedback or tech support, please review these guidelines:

• If you need technical support using Azure, the paid and free support options are described here: https://azure.microsoft.com/support/options/.

• Each article in the Azure technical documentation contains a product feedback button - it's best to submit product feedback directly from a relevant article. Otherwise, you can submit product feedback for most Azure products in the following product feedback forum: https://feedback.azure.com/forums/34192--general-feedback.

[KrishnaG-MSFT]

@vboyev-MSFT Thanks for reaching out to us, but at this time it does not look like you are referring to a document but to a specific scenario. If that's the case we request you to please post your question on MSDN and other forums, we have our engineers and others who are monitoring them and will be happy to help. If you have a document which you are following and if you think it needs an update, please let us know about that here.

[KrishnaG-MSFT]

@vboyev-MSFT According to this blog regarding Log Analytics agent multi-homing support, you may use ComObject 'AgentConfigManager.MgmtSvcCfg' and it's member 'AddCloudWorkspace' to add a workspace. I didn't test but just did a quick check if we have some member to remove a workspace and could see that there is a member called 'RemoveCloudWorkspace' as shown in below screenshot. Try to leverage that and see if it helps you to accomplish your requirement.

As I haven't got any response with a document link that you are referring to, so I will be closing this issue now.

[vboyev-MSFT]

Sorry for the delayed response. Thank you for your efforts, Krishnag. The link I was providing feedback to specifically was the ASC onboarding docs https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows#install-the-agent-using-the-command-line

I work with many enterprise scale customers that have many thousands of servers and they come to this page to onboard ASC (https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints ) - which is also the link the MDATP page for onboarding servers refers to , and the first comment is that they aren't going to use GUI to install or update the MMA, which leads to how do you script the addition of a workspace to MMA?

After months of looking, I finally found an official reference at https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-manage#remove-a-workspace-using-powershell

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-manage#add-a-workspace-in-azure-commercial-using-PowerShell

If I were master of the universe, anypage that refers to installing the OMS Agent/MMA/Azure Monitor Agent/Azure Security Center Agent/Azure Log Analytics Agent should have a reference to scripting the addition and removal of a ALA workspaces.