Process: Reinstalling Sentinel MMA (Microsoft Monitoring Agent)
If a Server is not sending logs or heartbeats to Sentinel and you have already tried restarting the Server and Service. Reinstalling the Sentinel MMA is needed to hopefully resolve this.
Process:
1. On the Affected Server, Open Run
2. Type in control and click OK, top open Control Panel
3. Change the View of Control Panel to Large/Small Icons, by clicking on the view on the top right. This is to show all options.
4. Select “Microsoft Monitoring Agent”
5. Change tab to “Azure Log Analytics (OMS)”
6. Select “e136afc9-0497-44fe-b6e6-806e2b9da174” and click on “Remove”
7. On the warning popup, double check the workspace ID and then click on “Yes”
8. Click on “Add”
9. Enter the following details:
Workspace ID: e136afc9-0497-44fe-b6e6-806e2b9da174
Workspace Key: THIS CAN BE FOUND IN BITWARDEN - Sentinel Workspace MMA Primary Key
Azure Cloud: Azure Commercial
10. Click on OK
11. Click on Apply
