Azure Monitor Agent supported operating systems and environments
This article lists the operating systems supported by Azure Monitor Agent. See Install and manage Azure Monitor Agent for details on installing the agent.
Note
All operating systems listed are assumed to be x64. x86 isn't supported for any operating system.
Windows operating systems
| Operating system | Support |
|---|---|
| Windows Server 2022 | ✓ |
| Windows Server 2022 Core | ✓ |
| Windows Server 2019 | ✓ |
| Windows Server 2019 Core | ✓ |
| Windows Server 2016 | ✓ |
| Windows Server 2016 Core | ✓ |
| Windows Server 2012 R2 | ✓ |
| Windows Server 2012 | ✓ |
| Windows 11 Client and Pro | ✓1,2 |
| Windows 11 Enterprise (including multi-session) |
✓ |
| Windows 10 1803 (RS4) and higher | ✓1 |
| Windows 10 Enterprise (including multi-session) and Pro (Server scenarios only) |
✓ |
| Azure Stack HCI | ✓ |
| Windows IoT Enterprise | ✓ |
1 Requires Azure Monitor agent client installer.
2 Also supported on Arm64-based machines.
Linux operating systems
| Operating system | Support 1 |
|---|---|
| AlmaLinux 9 | ✓2 |
| AlmaLinux 8 | ✓2 |
| Amazon Linux 2 | ✓ |
| Amazon Linux 2023 | ✓ |
| Azure Linux | ✓2 |
| CBL-Mariner 2.0 | ✓2,3 |
| Debian 12 | ✓ |
| Debian 11 | ✓2 |
| Debian 10 | ✓ |
| Debian 9 | ✓ |
| OpenSUSE 15 | ✓ |
| Oracle Linux 9 | ✓ |
| Oracle Linux 8 | ✓ |
| Oracle Linux 7 | ✓ |
| Red Hat Enterprise Linux Server 9+ | ✓ |
| Red Hat Enterprise Linux Server 8.6+ | ✓2 |
| Red Hat Enterprise Linux Server 8.0-8.5 | ✓ |
| Red Hat Enterprise Linux Server 7 | ✓ |
| Rocky Linux 9 | ✓ |
| Rocky Linux 8 | ✓ |
| SUSE Linux Enterprise Server 15 SP5 | ✓2 |
| SUSE Linux Enterprise Server 15 SP4 | ✓2 |
| SUSE Linux Enterprise Server 15 SP3 | ✓ |
| SUSE Linux Enterprise Server 15 SP2 | ✓ |
| SUSE Linux Enterprise Server 15 SP1 | ✓ |
| SUSE Linux Enterprise Server 15 | ✓ |
| SUSE Linux Enterprise Server 12 | ✓ |
| Ubuntu 24.04 LTS | ✓2 |
| Ubuntu 22.04 LTS | ✓2 |
| Ubuntu 20.04 LTS | ✓2 |
| Ubuntu 18.04 LTS | ✓2 |
| Ubuntu 16.04 LTS | ✓ |
1 Requires Python (2 or 3) to be installed on the machine. Requires packages which and initscripts.
2 Also supported on Arm64-based machines.
3 Does not include the required least 4GB of disk space by default. See note below.
Note
Machines and appliances that run heavily customized or stripped-down versions of the above distributions and hosted solutions that disallow customization by the user are not supported. Azure Monitor relies on various packages and other baseline functionality that is often removed from such systems, and their installation may require some environmental modifications considered to be disallowed by the appliance vendor. For example, GitHub Enterprise Server is not supported due to heavy customization as well as documented, license-level disallowance of operating system modification.
Note
CBL-Mariner 2.0's disk size is by default about 1GB to provide storage savings, compared to other Azure VMs that are about 30GB. The Azure Monitor Agent requires at least 4GB disk size in order to install and run successfully. See CBL-Mariner's documentation for more information and instructions on how to increase disk size before installing the agent.
Hardening standards
Azure Monitoring Agent supports most industry-standard hardening standards and is continuously tested and certified against these standards every release. All Azure Monitor Agent scenarios are designed from the ground up with security in mind.
Windows hardening
Azure Monitoring Agent supports all standard Windows hardening standards, including STIG and FIPs, and is FedRamp compliant under Azure Monitor.
Linux hardening
Note
Only the Azure Monitoring Agent for Linux supports these hardening standards. They are not supported by the Azure Diagnostics extension.
The Azure Monitoring Agent for Linux supports various hardening standards for Linux operating systems and distros. Every release of the agent is tested and certified against the supported hardening standards using images that are publicly available on the Azure Marketplace, including those published by Center for Internet Security (CIS). Only the settings and hardening that are applied to those images are supported. CIS-published images with additional customizations and images customized with settings and hardening that differs from official CIS benchmarks are not supported.
Currently supported hardening standards:
- SELinux
- CIS level 1 and 21
- STIG
- FIPS
- FedRAMP
1 Only the below-listed distributions are supported:
| CIS-hardened operating system | Support |
|---|---|
| Debian 10 | ✓ |
| Oracle Linux 8 | ✓ |
| Ubuntu 18.04 LTS | ✓ |
| Ubuntu 20.04 LTS | ✓ |
| Red Hat Enterprise Linux Server 7 | ✓ |
| Red Hat Enterprise Linux Server 8 | ✓ |
| Red Hat Enterprise Linux Server 9 | ✓ |
On-premises and other clouds
Azure Monitor agent is supported on machines in other clouds and on-premises with Azure Arc-enabled servers. Azure Monitor agent authenticates to your workspace with managed identity, which is created when you install the Connected Machine agent, which is part of Azure Arc. The legacy Log Analytics agent authenticated using the workspace ID and key, so it didn't need Azure Arc. Managed identity is a more secure and manageable authentication solution.
The Azure Arc agent is only used as an installation mechanism and does not add any cost or resource consumption. There are paid options for Azure Arc, but these aren't required for the Azure Monitor agent.
Next steps
- Install the Azure Monitor Agent on Windows and Linux virtual machines.
- Identify requirements and prerequisites for Azure Monitor Agent installation.