Azure Arc for Server just got a couple of new features. In this blog post, we are going to have a look at the new feature on Azure Arc enabled servers called extension management. This new Azure Arc enabled servers features allows you not only to deploy extensions like the Custom Script Extension, or the Microsoft Monitoring Agent but also enable features like Azure Update Management, Inventory, Change Tracking, and more for your servers running in a hybrid environment.
Introducing Azure Arc
For customers who want to simplify complex and distributed environments across on-premises, edge and multicloud, Azure Arc enables deployment of Azure services anywhere and extends Azure management to any infrastructure.
Learn more about Azure Arc here.
Azure Arc enabled servers already could benefit from several Azure Resource Manager features like Tags, Policies, RBAC, and some Azure Management features like logs and Azure Policy. With the new update, you can start using more extensions. With these extensions available, Azure Arc enabled servers also get features like Azure Update Management, Inventory, Change Tracking, and insights capabilities.
Azure Arc Enabled Servers Extension Management Video
You can also watch my summary video on YouTube.
Azure Arc Extensions
Currently, you have six different Azure Arc extensions you can deploy to your servers.
- Custom Script Extension for Linux – Azure Arc
- DSCForLinux extension on a Ubuntu
- OMS Agent for Linux – Azure Arc
- Custom Script Extension for Windows – Azure Arc
- PowerShell Desired State Configuration – Azure Arc
- Microsoft Monitoring Agent – Azure Arc
These extensions are similar and consistent with the virtual machine extensions for Azure VMs. These are small applications that provide post-deployment configuration and automation tasks on Azure Arc enabled servers. For example, if a server requires software installation, anti-virus protection, or to run a script inside of it, an Azure Arc extension can be used. Extensions can be run with the Azure CLI, PowerShell, and the Azure portal.
Azure Update Management
The new Azure Update Management integration into Azure Arc enabled servers, allows you to directly view assessments and missing updates on a specific machine. With Azure Arc enabled servers Update Management, you can also create and schedule a new update deployment to make sure the server is up-to-date.
You can find more about Azure Update Management here.
Inventory collection for Azure Arc enabled servers
With Inventory collection for Azure Arc enabled servers, you can now not only track the software inventory of Azure virtual machines (VMs) but also for servers running on-premises or other cloud providers.
Items that are tracked by Inventory include:
- Windows software
- Linux software (packages)
- Windows and Linux files
- Windows registry keys
- Microsoft services
- Linux daemons
You can find more information about inventory on Microsoft Docs.
Change Tracking
This feature tracks changes in Azure VMs and Azure Arc enabled servers, to help you pinpoint operational and environmental issues with software managed by the Distribution Package Manager. Change Tracking and Inventory obtains its data from Azure Monitor. Machines connected to Log Analytics workspaces use Log Analytics agents to collect data about changes to installed software, Microsoft services, Windows registry and files, and Linux daemons on monitored servers.
You can find more information about Azure VM, and Azure Arc enabled server change tracking and inventory on Microsoft Docs.
Monitoring and Insights
With this update, you can now also enable Azure Monitor for your Azure Arc enabled servers. This will allow you to analyze the performance and health of your Windows and Linux servers, and monitors their processes and dependencies on other resources and external processes. It includes support for monitoring performance and application dependencies for servers running on-premises or in another cloud provider.
Conclusion
The new Azure Arc enabled servers extensions management feature enables a couple of new features and scenarios to manage your hybrid machines. In the next couple of days and weeks, I will add additional articles and videos which will show you the specific features in some more details. If you have any questions, feel free to leave a comment.
Tags: Azure, Azure Arc, Azure Monitor, Change Tracking, Extension, Extensions, Hybrid, Hybrid Cloud, Insights, Inventory, Linux, Management, Microsoft, Monitor, Server, Servers, Update Management, Windows Server Last modified: June 18, 2020
Hi, Thomas,
I am testing Azure Arc right now and have an Ubuntu 16.04. test machine on GCP. I was also able to successfully install the Azure Arc Agent (Connected Machine), the machine sends heartbeats and I was able to add it to the update and inventory management and change tracking. What does not work: Monitoring. When I want to enable Monitoring, Azure tries to install the DependencyAgentLinux Extension Version 9.10. 4.10090 on the machine and this failed. Without a concrete error message. Ubuntu 16.04. is supported according to Supported OS List. If the monitoring would still work well, we would like to use Arc in a larger, heterogeneous customer environment.
I would be very happy about a hint what the problem might be.
great that you are trying Azure Arc. Since, we are in public preview it looks like you did hit a bug. I think I have seen something like this before. I recommend that you open up a support ticket, so the team can get the logs to find out what is wrong.
Hi Thomas,
I was wondering if the Azure Arc Agent will allow us to have some insight into On-prem windows servers with Azure Advisor, in regards to rightsizing recommendations?
Thanks,
Hi Ruben
This is an interesting use case :) Currently, that is not possible, but would be interesting. I will forward your feedback to the team :)
Hi Thomas,
I am testing Update Management on arc enabled servers but i can not find a way to use the tags for scoping update deployments to the arc enabled servers. When i select the subscription and tag, no arc enabled are servers are being targeted. Am I doing something wrong or is it not supported ?
Hi Thomas,
Please could you confirm that Update Management can be enabled on ARC Servers and what eventually what steps are required ? For example, They aren’t showed in Azure Automation Update Management. Is it required to install Log Analytic agent ?
‘UpdateManagement’ solution enablement for Azure Arc machines is not supported from the Azure Portal experience at this time.
Yes, you will need to activate it from the Update Management in the Azure Automation account for now. (Just first time activation) Since this is not available on the Azure Arc enable Server page yet. After you have activated it, you will be able to see and manage updates on the Azure Arc enabled Server page.
Hi Tomas. I’m starting with Arc. I’ve already completed the official training. In there they also mention DSC as an extension but I’m unable to find it. Is such extension deprecated perhaps?