Change Tracking page blank

Question

Followed the link and walked through the Change Tracking & Inventory setup: https://learn.microsoft.com/en-us/azure/automation/change-tracking/enable-vms-monitoring-agent?tabs=singlevm%2Carcvm

When I access the Arc-enabled machine and select the change tracking tab it is blank. This is the same for Inventory. I have gone through the basic troubleshooting spelled out here:https://learn.microsoft.com/en-us/azure/automation/troubleshoot/change-tracking

If I go through the automation account, no information is being recorded. As far as I can tell, the DCR and LAW are configured and setup correctly in the appropriate locations. I can see event logs being recorded as well as the VM Insights. Not sure what I am missing at this point.

NOTE: I am not using log analytics, I am using AMA.

Answer

Hello!
I just tested this in my subscription and it works. I think you chose the wrong Workspace because this technology creates a separate one by default (with name [defaultWorkspace--fim]) and in the tab "Change tracking and inventory | Change tracking" you need to select default workspace.

I would also like to emphasize an important point. According to these articles, the File integrity monitoring functionality will soon be greatly changed and transferred (I think including Change Tracking & Inventory, because it works via AMA now, but it will work like Defender for Endpoint agent integration later):

https://learn.microsoft.com/en-us/azure/defender-for-cloud/upcoming-changes
https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent

User's image

Screenshot from this table: https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent#feature-functionality

If the above response was helpful, please feel free to "Accept as Answer" and click "Yes" so it can be beneficial to the community.

Share via

Change Tracking page blank

1 answer

Your answer