How to Set Log Analytics to a Specific Version in Azure

In certain cases, it may be necessary to set the Log Analytics version of your CloudGen Firewall in Azure to a specific value. Follow the steps in this article to pin your Log Analytics version.

Before You Begin

• To enable log streaming to Log Analytics on your CloudGen Firewall, see How to Configure Log Streaming to Microsoft Azure Log Analytics.

Step 1. (optional) Disconnect the Log Analytics Workspace from Your CloudGen Firewall

This step is necessary only if your Log Analytics workspace is already connected to your CloudGen Firewall.

1. Log into the Azure portal: https://portal.azure.com
2. In the left menu, click All Services and go to Log Analytics workspaces.
   
3. In the search bar, enter the name of the Log Analytics workspace where your CloudGen Firewall is connected to.
   
4. To open the workspace, click on the entry of the Log Analytics workspace where your CloudGen Firewall is connected to.
5. Click on Virtual machines in the workspace.
   
6. In the search bar, enter the name of your virtual machine to filter the results.
   
7. Click on the entry of the virtual machine of the CloudGen Firewall you want to pin the Log Analytics version for.
8. Click Disconnect to disconnect your CloudGen Firewall from the Log Analytics workspace.
   
9. To confirm that you want to disconnect the virtual machine, click Yes.
   
10. Wait until you are informed that it is successfully disconnected.

Step 2. Set the Log Analytics Version

1. Log into the Azure portal: https://portal.azure.com
2. To open the Cloud Shell, click on the shell icon in the upper-right corner.
   
3. Select Bash in the Cloud Shell menu.
   
4. Enter the following command in the shell and press enter to run it:

   az vm extension set --name OmsAgentForLinux --publisher Microsoft.EnterpriseCloud.Monitoring --version <version_number> --no-auto-upgrade --no-wait --force-update --protected-settings '{"workspaceKey": "<workspace_key>"}' --settings '{"workspaceId": "<workspace_id>"}' --resource-group "<rg_name>" --vm-name "<vm_name>"

5. The Log Analytics version of your CloudGen Firewall is now set to the specified version.