Recent Discussions
Reporting on Resource Group Membership?
A user was wondering if there is a way to list every Resource that was in a specific folder or its subfolders over the course of a year. I dont know of any way to do it off the top of my head. Even doing some testing moving things into or out of folders, there isnt any commonality in the audit logs, depending on whether it was done manually or via API or at creation time or etc. At least not that I could see. So I'm just wondering, if I have a Resource Group like "Group01/My Stuff/" that itself may have a couple of tiers of subfolders beneath "My Stuff", is there any way to generate a list of any Resource that had ever been in "My Stuff" or one of its sub-groups over the course of a year? Thanks!SolvedLewis_Beard19 days agoProfessor26Views0likes1CommentISO 27001 Certificate - updated version, please
REQUIRED FOR A CUSTOMER On this page: https://www.logicmonitor.com/security ...the linked ISO Certificate references a retired version of ISO 27001 (2013) and this expired on May 31, 2025. Please could the updated certificate be uploaded?SolvedDavid_Bond2 months agoProfessor28Views1like2CommentsDeep Dive troubleshooting question
I'm having difficulties tracking down the source of a Service Account Lockout occuring in a fairly complex domain structure. I've found it necessary to set WMI creds at the top of the heirarchy, with sub-groups having different WMI creds, as well as individual devices with their own. On the domain controller that would be targeted with a sub-group WMI cred set, I see most 'Sources collecting correctly, but a few times a day, the SA is locking out. I find the 4740 on the DC, but can't quite track down the specific event (should be a 4625) causing the lockout. The only 4625 I'm finding show the Main group WMI creds... which are in a different domain. Seems as though some 'Sources are using the wrong WMI creds (or defaults based on the Collector's SA). The question: Is there a way to get a !TLIST showing the WMI.USER being leveraged in the debug console for each job?SolvedCole_McDonald2 months agoProfessor69Views0likes6CommentsWhere are LLDP and CDP categories set?
I have some devices that I expected to pick up the LLDP Neighbors and/or CDP Neighbors datasources, but those require LLDP and/or CDP categories, but I'm not sure which part of LM would make that assignment. I dont see any property sources specific to LLDP or CDP, and I dont usually get too deep into the weeds on debugging category code. Any suggestions on which property source this comes from, or if its from sysoid maps or something else? Thanks!SolvedLewis_Beard2 months agoProfessor38Views0likes1CommentHow to alert when we STOP receiving logs?
We recently had an issue where we needed to review logs from a router during a P1 outage, but found that LM had stopped receiving logs from the device 2 weeks ago. We need a way to have a "No Data" type of alert for logs, so that if a device stops sending us logs we can be notified and resolve the issue. Instead of finding out 2 weeks later when the logs are needed during an outage. We can't use the Log Usage datasource for this because it is based on push metrics and does not have a collection interval.SolvedMatt_Whitney2 months agoExpert49Views2likes2CommentsBest Practices to limit application of LogicModules?
I have a user who wants a couple of LogicModules installed to our LM portal. They don't want to impact the rest of the portal, and I agree. Therefore we would like the LogicModule to apply only to a specific resource group (and its children). However the LogicModule uses "hasCategory" in the AppliesTo and it would be added to 6000+ devices on the portal, which have that category. The only way I know to limit the application of the LogicModule would be to make a custom edit to the datasource, which I dont want to do, OR to disable the datasource on resource groups where I dont want it applied. But the problem with disabling it at the resource group folder is that I believe the parent folder overrides the children. So I cant turn it off at the top levels and then enable it on one folder deep within the resource tree. I believe I would have to disable it at every folder under (root) except the one containing the sub-folder, and then go into that sub-folder and disable it on all the child resource group folders EXCEPT the one containing the target, and disable it there too, and keep repeating that disable-as-I-zoom in technique, in order to make it work. Is there any better way to do this that I havent thought about? Thanks.SolvedLewis_Beard3 months agoProfessor62Views0likes3CommentsDisabling SNMPv1/v2c - Only use v3
We have a group of devices which are configured with SNMPv3. The properties set against these devices in LM are only v3 - there are no SNMP community details configured against, or inherited by the devices. The devices have been successfully discovered and metrics are being collected yet periodically (approx every 3hrs), we're seeing failed v1 and v2c connection attempts in the device logs, with those attempts coming from the collectors. I am told by support that this is expected behaviour, despite the product documentation stating: LogicMonitor attempts SNMP communication initially with version 3, then 2c, and finally version 1. The highest responding version is set for this value, and any attempts to edit it will automatically revert. I am also told there is currently no way to disable the use of v1/v2c. It strikes me that this is something that should it be possible to set at a collector level so am considering raising feedback, however I wanted to check whether anyone in the community has implemented any sort of ingenious method to enable only SNMP v3 collection/discovery, or if we just need to convince our security team to accept that the device logs are going to contain regular failed attempts from the collectors?SolvedMatt_Taylor3 months agoNeophyte82Views0likes4CommentsCustom Properties auto-resetting after Save?
I will probably open a support ticket and I hope this is just an ignorance thing on my part, but figured I'd check first. A user reported a weird situation. They have a resource folder in which they have set a custom property (snmp.version) to be "v3". For some reason one of the devices in that folder is overriding that with a custom property where the value is set to "v2c". SO FAR NO PROBLEM. But when we either change the custom property on the resource OR DELETE the custom property, as soon as we hit SAVE, the custom property is unchanged. We set snmp.version to v3 and LM immediately sets it to v2c. We delete the custom property, in hope the v3 value is inherited as it should be, but as soon as we hit save ... NO DICE. The value is just v2c anyway. No matter how many times we go change this property (set directly) and edit it to be v2c, or delete it, as soon as we hit save, NOTHING. It the logs I see that I edited the device, but no details. Is there some weird known scenario where this happens? I've never seen anything like it. And I have ENSURED that v2c is not set on any of the other static or dynamic folders that the resource is in. Has anyone seen this before? I kind of feel silly honestly. I wanted to ask here before I bother support.SolvedLewis_Beard3 months agoProfessor84Views0likes7CommentsSupport Cases - Conversation Timestamps Incorrect
I am trying to gather information on technical requests that have taken a considerable amount of time to resolve. While doing so, I noticed when opening a ticket with technical support (through a chat conversation), the case record shows all conversation entries at the exact same time. It appears that the date/time stamp is for the last entry in the conversation. However, if you export the chat, the timestamps appear correct: I am curious if this information is relied upon in order to identify support improvements.SolvedJRider3 months agoNeophyte50Views0likes1Comment