Azure Compliance ControlsAzure Virtual Machines
Windows machines should have the Log Analytics agent connected as expected
Requires that prerequisites are deployed to the policy assignment scope. Flags Windows machines as non-compliant when the Log Analytics agent is registered to a workspace other than the workspace ID specified in the policy parameter.
What this control checks
Windows VMs must have the Log Analytics agent installed and connected
Framework mappings
The clauses this control is mapped to in each framework.
- 1217.09ab3System.3-09.ab 09.10 Monitoring
- 12102.09ab1Organizational.4-09.ab 09.10 Monitoring
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_log_analytics_agent_installed_windows - Powerpipe Controls:
azure_compliance.control.compute_vm_log_analytics_agent_installed,azure_compliance.control.compute_vm_log_analytics_agent_installed_windows - Azure Policy Definition:
6265018c-d7e2-432f-a75d-094d5f6f4465
Last reviewed: 2026-10-11