Get started with Azure Operations Management Suite (OMS)

By: Siobhan Wood on

Learn from a cloud expert with this OMS How To:

If you’ve made the transition to Azure cloud and have IaaS and PaaS workloads running in some capacity, now might be the time to consider what Microsoft’s Azure Operations Management Suite (OMS) can do for you in helping you manage your new cloud based workloads and IT Infrastructure. This article will help you get up and running quickly with OMS and your IaaS infrastructure.

What is Operations Management Suite (OMS)?

  • Microsoft Operations Management Suite (OMS) is Microsoft’s cloud-based IT management solution that helps you manage and protect your on-premises and cloud infrastructure.
  • OMS is a collection of management services that will manage your cloud and on premise infrastructure.

OMS Key Components

Insight and Analytics
Gain deeper insights into applications and workloads with Log Analytics. Helps you collect, correlate, search, and act on log and performance data generated by operating systems and applications.

Automation & Control
Increase control with automation and configuration management. Azure Automation automates administrative processes with runbooks that are based on PowerShell and run in the Azure cloud. Runbooks can also be executed on a server in your local data centre to manage local resources.

Protection and Disaster Recovery
Ensure data protection with cloud backup and Disaster Recovery (DR) It can backup data from physical and virtual Windows servers in addition to application workloads such as SQL Server and SharePoint. Azure Site Recovery contributes to your business continuity and a disaster recovery strategy by orchestrating replication, failover, and recovery of on-premises Hyper-V virtual machines, VMware virtual machines, and physical Windows/Linux servers.

Security and Compliance
Security and Compliance helps you prevent, detect, and respond to threats with increased visibility. Identify, assess, and mitigate security risks to your infrastructure. Collect and analyse security events on managed systems to identify suspicious activity. Report on the status of antimalware protection and perform analysis of security updates and other updates on your managed systems.

OMS provides built in solutions for you to use straight away
Solutions add functionality to Log Analytics, they are easy to add readymade solution modules from the OMS gallery.

Understanding Collected Data in OMS

Data Types that can be collected

• Event Logs
• Syslogs
• Custom logs from applications

• Disk IOPS
• Network

OMS solutions provide pre-defined Log Analytics searches
Data is collected by Azure Log Analytics and stored in an OMS repository called a workspace and presented in Dashboards for the end user.

Data can be collected from:

• An agent installed on a Windows or Linux computer
• System Center Operations Manager (SCOM). SCOM agents communicate with management servers which forward events and performance data to OMS
• An Azure storage account that collects Azure Diagnostics data from a worker role, web role, or virtual machine in Azure.
• Data collector REST API

OMS Setup – How to Steps

1. Create a Log Analytics Workspace
2. Add solutions and offerings
3. Onboarding a server
4. Selecting log type data to collect
5. View Data

1. In the Azure portal click the + for a new service and type Log Analytics – click Create

• Type a name for your workspace
• Select Subscription
• Select or create Resource group
• Select Location
• Select Pricing tier

2. Add solutions and offerings

Open the workspace you have created in the Azure portal and click on “OMS Portal”
Select a solution and click add

3. Onboarding a server

Click settings in the OMS Portal

• Connecting sources
• Windows Servers
• Download Windows Agent (64 bit) Download Windows Agent (32 bit) Logon to install on the server you are onboarding
• You’ll need the Workspace ID and Key to install the agent
• WORKSPACE ID: – example 65ca0379-e91c-4601-a005-3d44b948881b
• PRIMARY KEY: – example

4. Selecting log type data to collect

Click settings in the OMS Portal

• Data
• Windows Event Logs
• Enter the name of an event log to monitor eg Type in “System” and add
• Repeat for other types of event logs eg “Application”

5. Viewing Data

Click the home button to go back to the OMS Solutions overview page.

From here you can click into the solutions added to your OMS Workspace to display more detailed information.

For example, here I can see in Security and Audit under Identity and Access the logon activity of accounts in my environment. I can see straight away which accounts are having problems logging on and which computers are being accessed.

Once you are up and running with OMS and have added some solutions, have a dig around and see what data in presented to you. In addition to the data presented in the individual solutions, you can perform custom searches across your entire dataset to present more specific information to your needs.