Overview

This month's Product Power Hour focused on one of the most requested next steps in observability and AIOps: Automated Remediation.

Building on the success of Automated Diagnostics, LogicMonitor introduced new capabilities that enable teams to automatically execute remediation actions when alerts occur, reducing manual intervention, shortening outages, and helping teams focus on higher-value work instead of repetitive operational tasks. The session included a live demo showcasing how remediation modules, action chains, and alert-driven automation work together to automatically resolve common infrastructure issues before they impact users.

Assets

Recording

Key Highlights

🌟 Automated remediation reduces MTTR by fixing issues at the moment of alert

Instead of simply generating another notification, Automated Remediation can execute scripts that attempt to resolve the underlying issue immediately when an alert fires. Whether it's restarting a service, cleaning up disk space, or killing a runaway process, teams can automate common recovery actions and reduce the duration and impact of incidents.

🌟 New remediation source modules extend LogicMonitor automation

LogicMonitor introduced a new module type called Remediation Sources, complementing the existing Diagnostic Sources. Out-of-the-box modules currently support common Windows and Linux use cases such as:

Restarting devices
Starting or stopping processes
Disk cleanup
Preparing Windows clusters for maintenance
Suspending or resuming cluster nodes

These templates can also be customized for organization-specific workflows using PowerShell or Groovy scripts.

🌟 Action Rules automate recovery workflows

The session demonstrated how Action Rules and Action Chains can automatically trigger remediation workflows when specific alert conditions occur. Similar to Alert Rules and Escalation Chains, teams can define:

Which alerts trigger automation
Which remediation modules run
Multi-stage diagnostic and remediation workflows

This enables proactive recovery without requiring operator intervention.

🌟 Diagnostics and remediation work together

Automated Diagnostics continues to capture critical troubleshooting data at the exact moment an alert occurs. Examples shown included:

Top CPU and memory-consuming processes
Traceroutes
Network interface statistics
Event log collection

This diagnostic context can be attached directly to alerts and ITSM tickets, helping responders investigate issues faster. Future roadmap plans include deeper integration between diagnostics and remediation workflows.

🌟 Deep Edwin integration is on the roadmap

The team shared plans for Automated Remediation and Diagnostics to become tightly integrated with Edwin. Future capabilities include:

Edwin understanding which diagnostics and remediations have already been attempted
Edwin recommending remediation actions
Executing remediation directly from Edwin workflows
Leveraging remediation history to recommend playbooks and threshold tuning

While not yet available, this integration represents a key direction for LogicMonitor's Agentic AIOps strategy.

🌟 Security and governance were built into the design

The release includes new RBAC controls and auditing capabilities that allow teams to:

Control who can create, edit, view, and execute remediations
Track all remediation activity through audit logs
Restrict which processes can be modified
Store remediation-specific credentials separately from standard monitoring credentials

Additional granular permissions are already planned for upcoming releases.

🌟 ITSM and workflow integrations extend automation beyond LogicMonitor

Remediation and diagnostic outputs can now be passed directly into existing workflows, including:

ServiceNow
Jira
PagerDuty
ConnectWise
Slack
Microsoft Teams
Custom HTTP integrations

The team also discussed customer interest in triggering tools such as Ansible and Terraform through custom remediation modules.

Q&A

Q: Can Edwin trigger or perform remediation actions?

A: Yes. APIs already exist, and future Edwin integrations will allow Edwin to recommend and execute diagnostics and remediation actions while incorporating the results into investigations.

Q: Can diagnostic results automatically trigger remediation actions?

A: Not today, but it is a key roadmap item. The team specifically discussed scenarios where diagnostic output (such as identifying the top CPU-consuming process) could automatically feed into a remediation workflow.

Q: What prevents LogicMonitor from terminating critical processes accidentally?

A: Customers explicitly define which processes or services can be acted upon. LogicMonitor only performs remediation actions against approved targets and supports allow-lists for additional control.

Q: Are remediation modules custom-built or provided by LogicMonitor?

A: Both. LogicMonitor ships several prebuilt remediation modules for common use cases, while customers can also build and customize their own remediation scripts using PowerShell or Groovy.

Q: Can remediation modules trigger external tools like Ansible or Terraform?

A: Yes. While there are no out-of-the-box modules today, customers can build custom remediation scripts that call APIs or webhooks to trigger external automation platforms.

Q: Can users provide input when manually executing a remediation?

A: Not currently, but support for runtime parameters and user inputs is planned for an upcoming release. This would allow operators to provide targets, credentials, or other execution-specific values before running a remediation.

Q: Will LogicMonitor learn from remediation history to improve thresholds and playbooks?

A: The long-term vision is for Edwin to leverage remediation history to recommend threshold tuning, improve playbooks, and suggest automation opportunities. This capability is not available today but is actively being explored.

Q: Can credentials for remediation be sourced from privileged access management tools like CyberArk or Delinea?

A: Today, remediation credentials are stored in dedicated remediation resource properties. Native PAM integrations are not currently available, but the team acknowledged the importance of this use case and plans to investigate future options.

What's Next

🏆 LogicMonitor MVP Program Nominations

Applications for the next MVP class are now open through July 15th. MVPs receive:

Early product access
Beta opportunities
Direct engagement with product leaders
Speaking opportunities
Community recognition and exclusive events

👉 Apply through the LogicMonitor Community

🎓 LM Academy Deep Dive Sessions

The LM Academy team continues to host monthly product deep dives featuring hands-on demonstrations and direct access to LogicMonitor trainers.

👉 Explore upcoming sessions in the Community Events section

🚀 Elevate 2025

Join LogicMonitor's flagship community event this fall:

📍 Chicago — October 13–14
📍 London — November 3–4
📍 Sydney — November 17–18

Attendees can also participate in LM Training Live, featuring hands-on workshops and technical labs, with dedicated experiences planned for MVPs.

👉 Register on the LogicMonitor Elevate homepage and use code: ECC26Comp06