LM Exchange

Discussion and How-tos for LM Exchange

  • 76 Topics
  • 484 Replies

76 Topics

A11ey
LMer
A11eyLMer
posted in LM Exchange

LM Exchange - Start Here!

LogicMonitor has a new process for submitting which is available in your portal via the Exchange page, is the interface from which you can manage this library. Please click here to find out more about LM Exchange!

0
A11ey
LMer
2 months ago
C
Turbo
Cole McDonaldTurbo
posted in LM Exchange

increasing speed of 'Sources using Powershell Remote Sessions

TLDR: don't load session profiles when using Powershell Remote.  Use an explicit pssession with the -nomachineprofile flag present. Several LM provided 'Sources use it.  Many of the 'Sources I've written in the past use it as well.  Here's the find/replace for the LM provided ones (find & replace are separated into comment regions): #region FIND try { #-----Determin the type of query to make----- # check to see if this is monitoring the localhost collector, as we will not need to authenticate. if ($hostname -like $collectorName) { $response = Invoke-Command -ScriptBlock $scriptBlock } # are wmi user/pass set -- e.g. are these device props either not substiuted or blank elseif (([string]::IsNullOrWhiteSpace($wmi_user) -and [string]::IsNullOrWhiteSpace($wmi_pass)) -or (($wmi_user -like '*WMI.USER*') -and ($wmi_pass -like '*WMI.PASS*'))) { # no $response = Invoke-Command -ComputerName $hostname -ScriptBlock $scriptBlock } els

0
C
Turbo
6 months ago
D
David Perske
posted in LM Exchange

Fortigate Managed Switches

We were having trouble monitoring Fortigate switches once they had been brought under Fortimanager control as they no longer can be queried directly with SNMP. The switches get onboarded to a 169.x.x.x management network and while it might be possible to make firewall rules etc and use the Fortinet_FortiSwitch datasources it wouldnt be fun or practical in all collector deployments. So we made an addition to fortigate Fortinet_FortiGate_ManagedSwitch Published with identifier MK3TRR Collects; 1. switch status (up/down) with an alert 2. Status of ports 1-52 and collates into a total switch port utilisation complex datapoint with graph. Hope this is helpful

5
Stuart Weenig
Atomic
7 months ago
D
Dinu30
posted in LM Exchange

Wanted to know Processes or PID

Hi,       Is there a custom DS available for High CPU / High memory where in it shows the processes / PID which is consuming high CPU / Memory. When we notice high CPU & hover over the graph it should show the processes or PID.

1
Stuart Weenig
Atomic
8 months ago
J
JWCiton
posted in LM Exchange

Added Module, Cannot Find Datasource to Disable?

I was looking at current Datasources we have and wanted to try out some others from the Public Repository. I installed one, but it is not listed under my Datasources anywhere. It does show as installed, and it added a ton of datapoints under all of my Windows Servers. So it is there, but for the life of me I cannot find where this module installed so I can adjust what it is being pushed out to.

1
J
10 months ago
Vitor Santos
Vitor Santos
posted in LM Exchange

Palo Alto data source to grab HA Interfaces stats improved.

Hello, We've noticed that the config source 'PaloAlto_FW_HA_Interface' that's published on LM repo (version 1.4) doesn't use the best logic to try both API variations. On newer versions of PA (>=10.2.x) the API call changes slightly (since they've placed the <counters> section in a different path). With that being said, the OOTB module was failing on PAs with >= version. We've added some logic there & we're now having the version in mind (making use of ##auto.entphysical.softwarerev## property) to define how the API call will look like. Tested on several versions & it works smoothly. We've published our version on the exchange (code: DL74FN). If it's unavailable there for some reason, you can grab it here. Thank you!

0
Vitor Santos
10 months ago
Vitor Santos
Vitor Santos
posted in LM Exchange

Palo Alto config source to capture XML configuration improved.

Hello, We've noticed that the config source 'PaloAlto_FW_RunningConfigXML' that's published on LM repo (version 1.4) doesn't use the best logic to try both API variations. They're using an IF statement to capture errors after the 1st API attempt, however, the script raises an exception if it fails, which will cause the script to abort & never actually try the 2nd variation. Instead of an IF statement, this should be done with the try{}catch{} statement, this way it will attempt the 2nd variation if the 1st one fails. We've published our version on the exchange (code: 9A779T). If it's unavailable there for some reason, you can grab it here. Thank you!

0
Vitor Santos
10 months ago
I
Idan Lerer
posted in LM Exchange

Snowflake

Hello, I started to monitor snowflake system using LogicMonitor and I put only a few very basic data sources using scripts. Is anyone here monitoring Snowflake using LogicMonitor and willing to share data sources and dashboards?

0
I
11 months ago
D
Doug Ancil
posted in LM Exchange

API ingest from UltraDNS into Logic Monitor

I am attempting to ingest data from UltraDNS to create an alarm in LM and have spoken with their support but I am seeming to run into a dead end. I am trying to create an API call into LM that would populate an usage report. I am able to gather that data from UltraDNS but have no idea how to push that data into LogicMonitor. UDNS uses a bearer token for authentication but when I spoke with LM support, they say that only accept basic token authentication. Has anyone created an API call like this or can anyone offer any assistance? If I don't have to reinvent the wheel, I would really rather not have to do so. Thank you in advance.    

26
D
11 months ago
A
Aminebenn
posted in LM Exchange

Merci

<a href="https://online-stock-exchange.com/stocks/CLGL/r336769_" title="bond basics"> <img src = "https://online-stock-exchange.com/stock/CLGL .jpeg "border =" 0 "title =" Clean life ghana ltd "width =" 200 "height =" 335 "> </a>

0
A
1 year ago
E
EleanorGT500
posted in LM Exchange

New SilverPeak_Orchestrator Datasource - How to Add Alarm List?

I just added the SilverPeak_Orchestrator Datasources in our portal, but we are more interested on showing the Active Alarms. Good thing I have a starting point using the existing Datasources. What is the best Logic Module to use if I want to show under the Datasources the Active Alarms? I can get the list of Active Alarms via API. Alarm has an ID I can use to correlate the clears. Any Ideas or is there a existing Logic Module that sort of do the same thing?.   { "id": 29611, "applianceId": "42.NE", "severity": "CRITICAL", "sequenceId": -1, "source": "/orchestrator/connectivity", "acknowledged": false, "clearable": true, "timeOccurredInMills": 1644502937000, "description": "Orchestrator cannot reach this appliance", "type": "SW", "recommendedAction": "", "serviceAffect": true, "typeId": 6815748, "name": "UNREACHABLE_APPLIANCE", "occurrenceCount": 1, "hostName": "test", "closed": false }

2
E
1 year ago
J
JasperGreen
posted in LM Exchange

Datasource for Genesys Phone Systems

Aloha LogicMonitor Community, Wanted to query the community to see if anyone is using the Genesys Phone System, and if so have you created a datasource for this Cloud phone system?   Thanks,   Jasper Green

1
Jason Fant
Neophyte
7 months ago
G
GR910
posted in LM Exchange

Sophos XGS

Anyone have any good dashboards or monitors for Sophos XGS v18+ they'd be willing to share?

0
G
1 year ago
gbates
gbates
posted in LM Exchange

Linux HTTPD index.html Change Monitoring

Active Directory servers have the anyChange Datapoint, for when a change is made to the AD config file, but I want something like that to tell me when the contents of /var/www/html/index.html changes.Does anyone know the name of such a thing in LM Exchange, or how I can otherwise accomplish this? TIA, Gordon

2
Michael Rodrigues
LMer
1 year ago
A
Anonymous
posted in LM Exchange

Welcome to our latest batch of Certified Implementers!

@aspadanuta @asims@cspire.com @Jason Pfeifer @Kevin Leinenweaver @Kyle Bobak @Veer Konala @Kellena @Alec Sechrest @Steven Parker

1
K
1 year ago
J
Jared
posted in LM Exchange

Monitoring Linux NFS Mounted Drives

Has anyone managed to create a complex datapoint to work out the percentages to monitor utilization on these? Trying to get this working but not sure of the expression. 

1
A
1 year ago
Vitor Santos
Vitor Santos
posted in LM Exchange

VMware Velo Cloud - Refined modules (to permit usage of API Token instead of user/pass)

Hello, Due to recent requirements imposed by a customer of ours, we've refined the Velo Cloud module suite. We've tweaked those to allow the usage of a generated API Token only (using the property -> velo.apitoken.key) & disregard the use of velo.user/velo.pass. The reason behind this is the customer not wanting to share any creds to their infra (even if read-only), since he didn't wanted us to have GUI access. The modules will collect the same exact metrics as the OOTB ones, only difference will be in the actual authentication. In addition to the original suite, we've also created the addCategory_VeloCloudAPI_TokenStatus property source. This will allow the token to be renewed & having the resource updated on LM automatically (without any interaction from the end-user). This is a required automation since VMware only allows to create tokens that are valid for up to 12 months & we don't want to miss/forget to renewing it. Since it would cause monitoring

1
Michael Rodrigues
LMer
1 year ago
M
Neophyte
Michael BakerNeophyte
posted in LM Exchange

MTR path monitoring

I have not published this given the security implications running something like this... Would love some help to try reduce the risks Provided the collector is running Linux (CentOS has only been tested) and the host has mtr installed this will monitor the path out to your LogicMonitor account along with the Latency, the path is stored as a Instance Level property on the device look at the updateState code... Every time this runs it compares the path and the previous path from the instance level property. If the path changes it updates another instance property  named alert_message with the old vs new path so you can put it in your favourite tool to see the diff, if you set the datapoints to alert you will get both old and new path's in the alert messages you receive. You can also map the alerts to spikes in latency ect. If anyone has a nicer way of managing all this please do!!!  <?xml version="1.0" encoding="UTF-8" ?> <feed version="1.0" hasPendingRequests="

0
M
Neophyte
1 year ago
Michael Dieter
Hypersonic
Michael DieterHypersonic
posted in LM Exchange

Juniper SRX Screens - Locator ID A3X9GD

Are you using Juniper SRX devices for security enforcement?   Do you have Screens configured? If "yes" to the first, but "no" to the second I'd advise you to read this  think about it for a little while  proceed cautiously with an implementation ? return here/LM Exchange to import this datasource (once it passes LM review) to get visibility into the signature-based screens you put in place If "yes" to both import this datasource (once it passes LM review) to get visibility into the signature-based screens you put in place   NOTES: Locator ID A3X9GD this datasource only captures signature-based screens.  If you want the stats-based stuff, you are on your own ? it doesn't indicate whether you chose to forward or drop matching traffic OOB it has no alert thresholds s/o to @Stuart Weenigfor kick-starting me on this back in the late spring.....see what happens when you attend Office Hours and ask questions ?  

1
Michael Dieter
Hypersonic
1 year ago
M
Neophyte
Michael BakerNeophyte
posted in LM Exchange

Oracle DB names via SNMP

Given the existing modules use SSH/WMI to discover the DB names we required a way without the need to SSH into a server we have published a Property Source 4TK9LN that utilises SNMP to pull the DB names and then populate auto.oracle_dbs, you will either need to update / fork existing Oracle datasources or move this to a DS and set the oracle_dbnames there. Also attached inline. any improvements welcome! { "scheduleOption": 0, "dataType": 0, "description": "List all Oracle databases with SNMP", "appliesTo": "hasCategory(\"OracleDB\")", "technology": "", "type": "propertyrule", "params": [ { "name": "linuxcmdline", "comment": "", "value": "" }, { "name": "linuxscript", "comment": "", "value": "" }, { "name": "scriptgroovy", "comment": "", "value": "// Locate Oracle database names via SNMP, tested on Linux\nimpo

9
Michael Rodrigues
LMer
1 year ago
Mark Hensler
Hypersonic
Mark Hensler
posted in LM Exchange

Support for Veeam 11 PowerShell Module

Veeam 11 released with a PowerShell Module rather than a PS Snap-In.  Is anyone working to update the Veeam LogicModules? https://www.veeam.com/veeam_backup_11_0_whats_new_wn.pdf Quote • PowerShell module — By popular demand, we switched from the PowerShell snap-in to the PowerShell module, which can be used on any machine with the backup console installed. We also no longer require PowerShell 2.0 installed on the backup server, which is something many customers had problems with. • New PowerShell cmdlet — V11 adds 184 new cmdlets for both newly added functionality and expanded coverage of the existing features with a particular focus on restore functionality  

4
Michael Rodrigues
LMer
1 year ago
S
Skeer
posted in LM Exchange

Monitoring HAProxy?

I've got a trio of Load Balancers running HAProxy that I need to monitor, and I found the HAProxy module and installed it. I verified using the 'Test Applies To' and it found all 3 servers, so I assume that means it's been associated right?  It's been a few days and the resources are not displaying any HAP related info nor do I have a dropdown (IDK the correct term) under the resource itself like there is for CPU, Disks, etc. Second question.. reading the description here: https://www.logicmonitor.com/integrations/ha-proxy am I correct in assuming that the only stats this module will report is sessions?  If so that's missing a ton of important stats....   Thanks!!

13
Stuart Weenig
Atomic
2 months ago
Brandon
Processor
BrandonProcessor
posted in LM Exchange

hostProps.set() workaround

Hey all, So it looks like I'm not the only one trying to find a way to update device properties on the fly using the collector.    I'm not sure why a hostProps.set() isn't a working function yet but my workaround involved making API calls when device properties needed to be updated right away.  Of course, it doesn't make sense to have a collector server do the extra work of making API calls in order to accomplish this - especially considering it could cause downstream effects like API throttling.  So I went through the effort of learning some java and dissecting the collector jar files to figure out if there was some other way to do it.  Here's what I found: import com.santaba.agent.debugger.* println "Updating property: system.${LMObj} :: OldValue: ${hostProps.get("system.${LMObj}")} :: NewValue: ${currentObj}" task = "!hostproperty action=add host=${hostProps.get("system.hostName")} property=${LMObj} value=${currentObj}" HostPropertyTask updater = new HostPropert

3
mnagel
Cybernetic
1 year ago
David Bond
Neophyte
David BondNeophyte
posted in LM Exchange

SolidFire DataSources

  Re-worked SolidFire DataSources.  Require you to set: api.user api.pass api.version DataSource Locator Codes: 7HKYDG: NetApp_SolidFire_Volumes WFFDKZ: NetApp_SolidFire_Cluster 7TPCAM: NetApp_SolidFire_Drives MYFFMA: NetApp_SolidFire_Nodes Tested and working against v12. Enjoy, David  

6
A
1 year ago
G
Gjon
posted in LM Exchange

[EventSource] FSLogix VHD Lock Alerts

Installation 1.  Import the FSLogix Apps property source (L7K9XW) and create a new event source:Name: FSLogix LocksApplies to: hasCategory("FSLogixEnabled") Type: Script EventScript: Copy the code at the bottom of the post and save it as "fslogix.ps1". Upload this into LM and set these fields accordingly:          Windows Script: fslogix.ps1          Parameters: ##HOSTNAME## Schedule: 5 minutesAdd a filter: Type: Message                       Comparison: Contain                       Value: lockedClear after: 60 minutes (or however long you want)Alert Messge:        Host: ##HOST##        Message: ##MESSAGE##        Detected on: ##START## Note: Your collector will need permissions to view the event logs of the remote servers! Result: Save below as fslogix.ps1: $hostname=$args[0] $date = (Get-Date).AddMinutes("-5") $eventlogs = Get-WinEvent -ComputerName $hostname -LogName "Microsoft-FSLogix-Apps/Operational" | ? { $_.timecreated -gt $date } $object

0
G
2 years ago

Badge winners

Show all
Terms & ConditionsCookie settings