Error onboarding. HTTP code 403, Reason: ClockSkew. Check the Workspace ID, Workspace Key and that the time of the system is correct.

Singh, Sushmita[Non-Employee] 6 Reputation points
2021-09-20T13:46:55.353+00:00

Agent Installation is failing on Linux server [OS:CentOS 6.6] due to the following error
“Error onboarding. HTTP code 403, Reason: ClockSkew. Check the Workspace ID, Workspace Key and that the time of the system is correct.”

Can anyone suggest, please ?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
975 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 21,621 Reputation points Microsoft Employee
    2021-09-20T21:36:59.337+00:00

    Hi @Singh, Sushmita[Non-Employee] , are you running this as a Global Admin or a role required for this? Error 403 means you don't have the right permissions scope. If it's not a permissions issue you should check these:

    Probable causes

    • Date and Time is incorrect on Linux Server
    • Workspace ID and Workspace Key used are not correct

    Resolution

    • Check the time on your Linux server with the command date. If the time is +/- 15 minutes from current time, then onboarding fails. To correct this update the date and/or timezone of your Linux server.
    • Verify you have installed the latest version of the Log Analytics agent for Linux. The newest version now notifies you if time skew is causing the onboarding failure.
    • Reonboard using correct Workspace ID and Workspace Key following the installation instructions earlier in this article.

    Please let me know if this fixes your issue. If not please let me know and I can assist you further.

    Best,
    James

    0 comments