Hey Abrar,
it looks like you’re facing an interesting issue with the Azure Monitor Agent (AMA) and how it handles newly enrolled devices versus older ones in terms of the group azuremetricsext. Here's what I can help you with:
Understanding the Issue:
When new devices are onboarded to a Data Collection Rule (DCR) or an Azure Monitor workspace, a group named azuremetricsext is being created. However, this does not seem to happen for older devices that have already been onboarded.
Possible Explanation:
The difference in behavior you’re observing could be due to the following reasons:
- Version Differences: Newer VMs or devices might be using an updated version of the Azure Monitor Agent which includes features or behavior that were not part of the agent deployed to your older devices.
- Data Collection Rules (DCR): The configuration of the DCRs for your old and new devices may differ. Ensure that the new devices are linked to a properly configured DCR that specifies the creation of such groups.
- Deployment Settings: It's worth checking how the old devices were set up compared to new ones. Any changes in deployment methodology might explain the discrepancy.
Suggested Steps:
- Compare Configurations: Check the DCRs and configuration settings for both your old and new devices. Look specifically at how the data is being collected and if any group creation rules differ.
- Documentation Search: Since you mentioned a lack of documentation, consider raising this as an official support request with Azure Support. They might provide insights that are not readily available in public documentation.
- Look for Agent Updates: Ensure that the Azure Monitor Agent is up to date on your older devices. Sometimes, behavior can change with updates that incorporate new functionalities.
Follow-Up Questions:
To better assist you, could you clarify the following?
- What specific versions of the Azure Monitor Agent are running on the new vs old devices?
- Can you confirm if the DCR settings applied to both new and old devices are identical?
- Have there been any recent changes in your Azure environment that might have coincided with the new behavior of group creation?
If you gather this information, it might help pinpoint the specific cause of the behavior you're observing. Hope this helps!