Product Discussions

Ask question, Find Answers, Get Help

  • 781 Topics
  • 3,201 Replies

781 Topics

A
Processor Participant
Austin CulbertsonProcessor Participant
posted in Product Discussions

'Inverting' Overview Graphs - Bottom 10 instead of Top 10

Does anyone know if it's possible to invert the devices that make it to the 'top' spot from an overview perspective? As I understand it, it's Top 10 that make it to these overview graphs -- what if I want to see the 'Bottom 10' on a given Overview Graph? I imagine there is probably some complex datapoint that I can use to invert my value, but this would add to the complexity of the datasource, and I'd like to keep it simple if possible.

1
A
2 years ago
Mike Moniz
Atomic Advisor
Mike MonizAtomic Advisor
posted in Product Discussions

Does LM portal has a WhatIsMyIP-like service?

I'm looking at options to provide the external IP address that a device has. Basically I would normally query a WhatIsMyIP.net like service to get the external IP address, but I'm wondering if LogicMonitor provides a simple webservice on *.logicmonitor.com that can provide the external IP so I don't have to worry about getting a 3rd party site whitelisted with our customers?  

1
A
2 years ago
Vitor Santos
Vitor Santos
asked in Product Discussions

Cisco EIGRP Peer alarm(s) not being supressed?

Hello, We've noticed the Cisco EIGRP PeerDown alarm(s) aren't being suppressed if the actual device goes down on LM. When lost SNMP connectivity to one of our routers, it started returning PeerDown alarms (since SNMP wasn't responding, causing the 'NoData' condition at the 'upTime' datapoint). This becomes an issue because the actual datapoint that checks the Peer status, bases itself on the data retrieved by the 'upTime' datapoint (which at this point, is as 'NoData). Basically, if the 'upTime' doesn't return data (which happens if the actual device goes down) it'll trigger an alarm for the PeerDown instances (since it'll always return False). LogicMonitor only sees the actual device as 'down' after 5 minutes (when not retrieving data). This DS will alarm first (since the PeerDown will return an alarm on 2 consecutive tools - which means 3 minutes). As per the documentation, all the alarm(s) emanating from the host will be suppressed. My question here (just to ma

9
Vitor Santos
2 years ago
J
joshlowit1
posted in Product Discussions

No data collected from sbproxy

Hi Team, I was getting the "No Data" on a lot of the datasources. I went through the WMI troubleshooting and made the needed changes, I did this after I ran the "Poll Now" and got a permissions error.  Now I can run "Poll Now" without the error but I am getting NaN and "No data collected from sbproxy" I'm not sure what else I need to do for the data to be collected. A collector did exist on this server but was moved to another server. Before the collector was moved we did not experience this issue. Any help would be appreciated. 

1
Mike Moniz
Atomic Advisor
2 years ago
Vitor Santos
Vitor Santos
posted in Product Discussions

Cisco UCS monitoring doubt

Hello, Now that a new suite of data sources is available for the UCS stuff, we're having some doubts on the monitoring related with the Cisco UCS Manager & their respective components (Fabric Interconnects, etc...) I'm sure the new suite removes the need of the SNMP legacy datasources (that's great btw!!!), however, we're now kinda lost on what should we add into LM (in terms of components). I'm pretty sure in the past we had to add the UCS Manager + the Fabric Interconnect devices (to fetch some hardware related info that wasn't fetched via UCS Manager), but currently, I see the same datasources applied to the UCS & both Fabrics. I'm assuming that we only require to monitor the actual UCS Manager from now on (everything else will be monitored under it). Specially the hardware portion of both Fabric Interconnects (at least from what I'm seeing). Is my assumption correct? Or, is there anything else we need to have in mind in terms of the Fabrics. Appreciate th

3
Vitor Santos
2 years ago
D
drazzopardi
posted in Product Discussions

Avoiding duplicate instances

Hi Throwing something out there for advice. There are a number of datasources that are subject to duplication of instance because you cannot safely turn on the automatically delete as legitimate instances may go down for longer than 30 days.  This appears to be due to them being very dependent on the instance name, so if this is something the customer has the ability to change then it creates another instance during Active Discovery. My question is if anyone has an ideas on a complex datapoint (or some other means) that can detect that this instance has matching property to another instance.  This could be say auto.device.mac_address or even the Instance Value as these always match between the duplicate instances. This is really bugging me now so I really need to find a proactive way to address them.  The real downside is that you lose the historical data when it is actually the same device.  What the ideal would be is if you could merge instance or at least delete th

4
Michael Rodrigues
LMer
2 years ago
M
Mat THorpe
posted in Product Discussions

Windows Event Log Correlation

Hi,  First post and I'm new to LM, though an old hand at monitoring and alerting so be gentle ? I've searched these forums and found a couple 'feature requests' to be able to alert only if message X appears greater than Y times within Z minutes in the Windows Event Log rather than alerting for every occurrence of message X. None of the posts appear to have a solution... Is this still the case? Either an official solution or a work around? Many Thanks Mat  

3
A
2 years ago
C
Clinansmith
posted in Product Discussions

Palo Alto Config Restore from LM backup file

This weekend I had a problem with one of my Palo Alto Firewalls.  Luckily I wasn't concerned because I had LM backing up my config all the time.  Unfortunately although the data is there, I could not get it into a format that I could load back into the firewall.  Has anybody successfully done this?  Any hints? Thanks What I've tried: 1. Download the file in *.conf format.  Imports in but won't load. 2. Download *.conf and then change the extension to .xml.  Imports but won't load.  XML file is viewable in a browser fine. 3.  The exports from a PA firewall have no file extension so I downloaded the .conf and removed it.  imports but won't load. 4. Copied and pasted all the lines from the LM console into Notepad++ and then remove the line numbers from all the lines.  I tried saving as xml and dropping the file extenstion.  It imports but won't load.  

2
C
2 years ago
Lyubov
Lyubov
posted in Product Discussions

API v2: get alert detail Message

Hello, I'm migrating from RPC API to REST and need to retrieve alerts with their full description (for processing in our own system). Unfortunately, when I tried API v2, I could not get fieldset "detailMessage", even though it's mentioned on API v2 Swagger page. Also there I can't find any parameter like "needMessage" used in RPC API and REST API v1. Is there any way to retrieve alert description (=subject in RPC, detailMessage.subject in REST v1) in alerts REST API v2? And do you plan to support such parameters/fields later?

4
Lyubov
2 years ago
Vitor Santos
Vitor Santos
posted in Product Discussions

Sharing Alert console filters? Is it possible?

Hello guys, We have created a few alarm 'views' for our different monitoring teams. Is there any way to share the alarm console filters (across users, roles, etc...)? If not, is that possibility coming in a near future? Appreciate your time. Regards,

2
Vitor Santos
2 years ago
J
JSmith
posted in Product Discussions

API Filtering

Is it possible to apply multiple filters to an API query? If so, would anyone have an example of what it would look like?    Here are my current attempts:  Working:  https://agio.logicmonitor.com/santaba/rest/device/devices?filter=deviceType:0   Not working:  https://agio.logicmonitor.com/santaba/rest/device/devices?filter=deviceType:0,name-QA*   Thanks! 

4
A
2 years ago
S
Suyash_08
posted in Product Discussions

Where we can set polling frequency?

Hello, I want to create alert which poll every 1 min and if it fails to match threshold criteria then it should create new alert for every polling. But i see only single alert on alert-dashboard instead of multiple alerts.' How can we set/modify to shoot new alert in every polling? Thank you, Suyash Gaikwad

3
A
2 years ago
J
JohnToner
posted in Product Discussions

Receiving 2 traps per event

I have a customer using LogicMonitor to receive SNMP traps, and it is receiving 2 traps for every one sent from our arrays. Do you have any suggestions on how to determine why the client is seeing double events?

1
A
2 years ago
Vitor Santos
Vitor Santos
asked in Product Discussions

Get the interface IP on the actual Interfaces datasource?

Hello, We were wondering if it would be possible to map the actual IP against the discovered interface(s)? - I'm referring specifically to the 'snmp64_If-' & 'snmpIf-' datasources Our goal is to be able to add deviceA (that contains 5 interfaces for example) & quickly determine which IP is assigned to each interface (I know we can always check the configuration but, it's not that productive). I also noticed that the device itself contains the 'system.ips' property but, we don't know which IP belongs to each interface. Appreciate the feedback. Regards,

5
Vitor Santos
2 years ago
Purnadi K
Purnadi K
posted in Product Discussions

Simple Check for SSL Cert Expiration Monitoring

Monitoring SSL Certificate expiry days can be done in LogicMonitor by making use of datasource SSLCerts- (SSL Certificate Expiration). On the side note, SSL Certificate is used for certifying a web server that does the secured socket layer data encryption between a web server and a client (web browser). SSL Certificate is issued by several organizations/companies so called Certificate Authority (CA) for the purpose of providing the legitimacy of the web servers that encrypt the data for communication. The certificates issued will be digitally-signed by those CA and can be trusted by the client based on Root Certificates installed in the common browsers. It is, however, possible to create a self-signed certificate, which in this case is used for a testing purpose. Data will still be encrypted but the certificate will not be trusted by the client browsers. When a device with SSL Cert installed has been added to LogicMonitor, rightfully that datasource will be auto-applied, as with

12
C
Cobot Collaborator
2 years ago
C
Clint St. Romain
posted in Product Discussions

Exporting Users

Would it be possible in the future to export users into a PDF or Excel spreadsheet. Also, when we sort the user table it doesn't seem to actually sort by any of the columns correctly. If we try to sort by 'Roles' it sorts by 'Usernames' first then 'Roles'. We would like the ability to be able to sort by the specific column we choose. If we look at the properties of a group, you can't see who is attached to the groups either. We would like to be able to go into a group and see what users are in that group.

3
A
2 years ago
Vitor Santos
Vitor Santos
asked in Product Discussions

Random custom properties appearing within our 'root' folder

Hello to everyone, For the past couple of weeks we've been noticing that from time to time 'customProperties' get created within our 'root' group at LM. We've asked our team if anyone created those, everyone stated that they weren't manually created.  Tried to check it within Audit logs, but I can't find any event that relates to that action. I'm not sure what is causing this (couldn't be LM fault)... Examples of properties that get created: - snmp.community - esx.user/pass We've a bunch of folks working on this at the same time & we're not discarding the possibility of this being done by mistake (however, the weird thing is we can't see this in the Audit logs). Anyone faced this sort of scenario in the past? Thank you!

4
Vitor Santos
3 years ago
R
Ryan P.
posted in Product Discussions

Reports

Hello all, I am trying to get a report to show all alerts that happened within a time frame on certain resources. Like a device goes down sends an alert, comes back up but would go back down again and I am wanting to have a report that reflects that. Is there anyway to have the reports be generated in some way or is it not possible to do so. Thank you in advance for any help that can be provided. 

6
R
3 years ago
DanB
Cybernetic Observer
DanBCybernetic Observer
posted in Product Discussions

Is it possible to have two collector instances on one box?

I was wondering is it possible to have 2 collector instances running on the same box? Asking this b/c monitoring SQL Server requires the collector to be running as the actual Windows User that has access to the SQL DB or the jdbc user property cannot be a windows account. It must be a local SQL built in user. We are not getting a local user that's in SQL from our clients and we have a different service account that is for LM monitoring but its not the one we use for SQL access. That's a different user.  So I was wondering if it was possible to run a 2nd collector instance on the box we have already and have that instance run as the Windows SQL user that has the access to the SQL DB.

5
DanB
Cybernetic Observer
3 years ago
J
joshlowit1
posted in Product Discussions

Complex DataPoint for a Report

Hi Team, I am wanting to create a report for TotalIOPS which on a dashboard I have is DiskReadsPerSec+DiskWritesPerSec on the dashboard widget. I would like to create a custom datapoint that can be applied to servers that can be pulled to a report just like any other DataPoint so that I can create a report showing IOPs for a specific point in time such as May 1st 6am to 6pm. Currently I can create a metric report showing Reads and Writes but not the operation to combine them for total IOPs. I did look at the Complex DataPoints page and saw the syntax but it does not give clear real world examples and I've never created a complex datapoint before. I keep getting an error stating either syntax is incorrect or the datapoints do not exist but I copied the datapoints from the widget. Any help would be appreciated!

5
A
3 years ago
J
joshlowit1
posted in Product Discussions

SQL showing No Data

Hi Team, I have a couple of collectors that are showing No Data for SQL Server. Now the SQL servers do not get used a lot as they are in a test environment, would that cause the collector to say "No Data" on all metrics? I have checked and I do not see "No Data" on other item such as CPU or memory which leads me to believe it is not a WMI issue as I have found in the past. Any ideas?

4
J
3 years ago
DanB
Cybernetic Observer
DanBCybernetic Observer
posted in Product Discussions

Websites > Response > This String: does it support RegEx?

So question when setting up Website profiles, we need to alert if a status page contains either "Degraded' or "Down" or a multiple different status states.. Does the Response section allow for regEx statements?  In our other tool we could specify  /.*(DOWN|DEGRADED).*/  but so far no regex pattern that works elsewhere works in this profile section. Does it support regEx in this response section?   

2
DanB
Cybernetic Observer
3 years ago
Vitor Santos
Vitor Santos
posted in Product Discussions

API not working properly?

Hello guys, I've raised a case with LM support already but I want to share this with the community (to make sure you guys experience this as well or no). We've created a simple Python script (about 4/5 months ago) that checks on a specific device (using its ID) & look for the presence of a certain DataSource (in this specific scenario 'snmp64_If-').  

2
Vitor Santos
3 years ago
Michael Dieter
Hypersonic Enthusiast
Michael DieterHypersonic Enthusiast
asked in Product Discussions

Datasource development challenge

Anyone have any ideas about how to solve this challenge? We'd like to collect dhcp relay stats from our Juniper routers, not necessarily for minute-by-minute graphs and alerts but to be able to show patterns of longer term trends (hourly, daily, monthly) I've got the list of OIDs for the counts of DORA plus Naks, Informs, total lease count and total drops. The kicker is that they are stored on a per routing instance (ie VRF) basis and the OIDs aren't structured like #WILDVALUE (routing instance name or ID)#.n.n.n  Instead, all routing instances use the same OIDs, and to query them you issue a get at each OID with [routing instance name@(snmp community)] as the snmp community;  the output returned corresponds to the name of the routing instance. Somehow this has to possible, but it may be a situation where the effort to achieve and/or sustain it is going to exceed the value of the data it would provide.  

4
A
3 years ago
Mosh
Hypersonic Enthusiast
MoshHypersonic Enthusiast
posted in Product Discussions

Negative GLOB expressions broken in 136

This is more for info. I noticed today that in v136, negative GLOB expressions are not working in alert widgets.  I have a ticket open (it's urgent for us).@Sarah Terry

2
Mosh
Hypersonic Enthusiast
3 years ago

Badge winners

Show all
Terms & ConditionsCookie settings