From Azure Portal

From Azure Home select the Portal Menu
Select 'Microsoft Defender for Cloud'
Select 'Environment Settings'
Select a subscription
Click on 'Settings & Monitoring'
Ensure that 'Log Analytics agent for Azure VMs' is set to 'On'

Repeat the above for any additional subscriptions.

From Azure CLI

Use the below command to set 'Automatic provisioning of monitoring agent' to 'On'.

az account get-access-token --query "{subscription:subscription,accessToken:accessToken}" --out tsv | xargs -L1 bash -c 'curl -X PUT -H "Authorization: Bearer $1" -H "Content-Type: application/json" https://management.azure.com/subscriptions/subscriptionID/providers/Microsoft.Security/autoProvisioningSettings/default?api-version=2017-08-01-preview -d@"input.json"'

Where 'input.json' contains the Request body json data as mentioned below.

{
"id": "/subscriptions//providers/Microsoft.Security/autoProvisioningSettings/default",
"name": "default",
"type": "Microsoft.Security/autoProvisioningSettings",
"properties": {
"autoProvision": "On"
}
}

ID	Name	CSP	Domain	Severity
AC_AZURE_0019	Ensure that Auto provisioning of 'Vulnerability assessment for machines' is Set to 'On'	Azure	Compliance Validation	MEDIUM
AC_AZURE_0332	Ensure that Auto provisioning of 'Log Analytics agent for Azure VMs' is Set to 'On'	Azure	Compliance Validation	MEDIUM

Detections

Analytics

Tenable Cloud Security Policies Search

MEDIUM

MEDIUM