Azure Monitor Agent supported operating systems and environments

This article lists the operating systems supported by Azure Monitor Agent and legacy agents. See Install and manage Azure Monitor Agent for details on installing the agent.

Note

All operating systems listed are assumed to be x64. x86 isn't supported for any operating system.

Windows operating systems

Operating system Azure Monitor agent Legacy agent
Windows Server 2022
Windows Server 2022 Core
Windows Server 2019
Windows Server 2019 Core
Windows Server 2016
Windows Server 2016 Core
Windows Server 2012 R2
Windows Server 2012
Windows 11 Client and Pro 1, 2
Windows 11 Enterprise
(including multi-session)
Windows 10 1803 (RS4) and higher 1
Windows 10 Enterprise
(including multi-session) and Pro
(Server scenarios only)
Azure Stack HCI
Windows IoT Enterprise

1 Requires Azure Monitor agent client installer.
2 Also supported on Arm64-based machines.

Linux operating systems

Caution

CentOS is a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and planning accordingly. For more information, see the CentOS End Of Life guidance.

Operating system Azure Monitor agent 1 Legacy Agent 1
AlmaLinux 9 2
AlmaLinux 8 2
Amazon Linux 2017.09
Amazon Linux 2
Azure Linux
CentOS Linux 8
CentOS Linux 7 2
CBL-Mariner 2.0 2,3
Debian 12
Debian 11 2
Debian 10
Debian 9
Debian 8
OpenSUSE 15
Oracle Linux 9
Oracle Linux 8
Oracle Linux 7
Oracle Linux 6.4+
Red Hat Enterprise Linux Server 9+
Red Hat Enterprise Linux Server 8.6+ 2
Red Hat Enterprise Linux Server 8.0-8.5
Red Hat Enterprise Linux Server 7
Red Hat Enterprise Linux Server 6.7+
Rocky Linux 9
Rocky Linux 8
SUSE Linux Enterprise Server 15 SP5 2
SUSE Linux Enterprise Server 15 SP4 2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS 2
Ubuntu 18.04 LTS 2
Ubuntu 16.04 LTS
Ubuntu 14.04 LTS

1 Requires Python (2 or 3) to be installed on the machine.
2 Also supported on Arm64-based machines.
3 Does not include the required least 4GB of disk space by default. See note below.

Note

Machines and appliances that run heavily customized or stripped-down versions of the above distributions and hosted solutions that disallow customization by the user are not supported. Azure Monitor and legacy agents rely on various packages and other baseline functionality that is often removed from such systems, and their installation may require some environmental modifications considered to be disallowed by the appliance vendor. For example, GitHub Enterprise Server is not supported due to heavy customization as well as documented, license-level disallowance of operating system modification.

Note

CBL-Mariner 2.0's disk size is by default about 1GB to provide storage savings, compared to other Azure VMs that are about 30GB. The Azure Monitor Agent requires at least 4GB disk size in order to install and run successfully. See CBL-Mariner's documentation for more information and instructions on how to increase disk size before installing the agent.

Hardening standards

Azure Monitoring Agent supports most industry-standard hardening standards and is continuously tested and certified against these standards every release. All Azure Monitor Agent scenarios are designed from the ground up with security in mind.

Windows hardening

Azure Monitoring Agent supports all standard Windows hardening standards, including STIG and FIPs, and is FedRamp compliant under Azure Monitor.

Linux hardening

The Azure Monitoring Agent for Linux supports various hardening standards for Linux operating systems and distros. Every release of the agent is tested and certified against the supported hardening standards using images that are publicly available on the Azure Marketplace and published by CIS. Only the settings and hardening that are applied to those images are supported. If you apply additional customizations on your own golden images, and those settings are not covered by the CIS images, it will be considered a non-supported scenario.

Note

Only the Azure Monitoring Agent for Linux will support these hardening standards. They are not supported by the legacy Log Analytics Agent or the Diagnostics Extension.

Currently supported hardening standards:

  • SELinux
  • CIS level 1 and 21
  • STIG
  • FIPs
  • FedRamp
Operating system Azure Monitor agent 1 Legacy Agent1
CentOS Linux 7
Debian 10
Ubuntu 18
Ubuntu 20
Red Hat Enterprise Linux Server 7
Red Hat Enterprise Linux Server 8

1 Supports only the above distros and version

On-premises and other clouds

Azure Monitor agent is supported on machines in other clouds and on-premises with Azure Arc-enabled servers. Azure Monitor agent authenticates to your workspace with managed identity, which is created when you install the Connected Machine agent, which is part of Azure Arc. The legacy Log Analytics agent authenticated using the workspace ID and key, so it didn't need Azure Arc. Managed identity is a more secure and manageable authentication solution.

The Azure Arc agent is only used as an installation mechanism and does not add any cost or resource consumption. There are paid options for Azure Arc, but these aren't required for the Azure Monitor agent.

Next steps