Product Discussions

Ask question, Find Answers, Get Help

  • 780 Topics
  • 3,196 Replies

780 Topics

N
netcruiser
posted in Product Discussions

Two switches, same hardware, same sw version, same snmp config - one works, one don't

Hi folks, Another wired situation: I has two switches, same hardware, same sw version, same snmp config - one works, one don't. I can add one switch as device without any issue, the other one can't because of snmp issue. Had anyone seen similar problem? Any suggestion to resolve the issue? Thank you very much! Keith

1
A
3 years ago
N
netcruiser
posted in Product Discussions

How to add interface description to the name

Hi everyone, I'm new here and we have installed Logmonitor and get alerts as following: Active Alert NotificationAPP  10:00 AMHost - DEN-LEAF04Datasource - Interfaces (64 bit)-Ethernet9Datapoint - StatusFlap I wonder is there a way to add the Interface description to Ethernet9? Thank you, Keith  

2
N
3 years ago
S
Savad Mottammel
posted in Product Discussions

Run Script only if the Device/Instance is not under SDT

I've created a Datasource to Monitor Windows Service on machine and try to restart it using Powershell. But, i want it to run only if the Machine/Instance is not under SDT. How can i write it the code? How can i get the SDT status from LM via powershell.

1
A
3 years ago
Mike Moniz
Atomic Advisor
Mike MonizAtomic Advisor
posted in Product Discussions

New Office365 monitoring checks, caveats I've noticed

Recently LogicMonitor released a new set of Office 365 monitoring checks. I've built various O365-based checks over the years, mostly against Exchange portion via Exchange Shell but have been looking at implementing GraphAPI support for a while now. I saw that most of the new DataSources use GraphAPI so I was really interested in how LM implemented it since I wasn't able to get any real-time data from GraphAPI. I reviewed all of them and found LM were not able to get real-time data either. It's not really clear in the descriptions but the DataSources with "Reports" in the name (ex. Office365_Reports_OutlookEmailActivity) get the same data you see in Office365 Reports page. Either the data from the graph itself or the table below it. Microsoft only updates these numbers once a day and there is frequently several days of lag. So while LogicMonitor might show your organization received 100k emails today, it's actually how many you got perhaps 2 days ago. And the actual lag can chang

6
Michael Rodrigues
LMer
3 years ago
A
ADB
posted in Product Discussions

Dual-Home LM collector?

Can you dual-home LM collectors so that it polls devices on one interface but the connection to the Internet and the LM cloud service is via a different interface?  

2
A
3 years ago
J
JSmith
posted in Product Discussions

Tracking down LDAP Bindings

As a continuation to @Kerry DeVilbiss's datasource to track DC's that are getting unsigned LDAP bindings, we have been thinking about making a datasource that will track the incoming connections. Our thought was to take a page from this article and query our event log every X minutes and output the response of found events to the datasource. My question is a two-parter:  1) Does anyone have experience using a datasource to output large amounts of data to the wildvalue? If so, is there a character limit? We were thinking once we found the event we could narrow down the relevant data inside of a scripted method, but are worried about performance on the collector.  2) Aside from a some performance improvements on the collector, is there a benefit for adding this as a datasource rather than an eventsource? We often find the event module clunky and cumbersome.    Thanks! 

1
A
3 years ago
Antony Hawkins
LMer
Antony HawkinsLMer
posted in Product Discussions

Idle_Days PropertySource to identify long-term down devices

This PropertySource calls the LogicMonitor API to find the latest idleInterval value and converts it to the whole number of days a device has been down for. In many cases this will be zero, obviously. This value is written to a device property, auto.idledays, on each device. This can then be used to create dynamic groups with rules such as, for example: auto.idledays > 28 ...to identify long-term dead devices that you should attend to, by fixing or deleting. These groups can also, naturally, be used in reporting and dashboards to easily visualise relevant device counts.Useful if you have 1,000s of devices and find it difficult to keep on top of those that no longer exist. You will need to create an API token set (ID and Key) for a user account with (at least) view permissions to all devices in your account, and set these at the root level of your device tree as properties apiaccessid.key (the 20 character ID) and apiaccesskey.key (the 40 character key). v1.0.

1
Antony Hawkins
LMer
3 years ago
I
IT GUY
posted in Product Discussions

Remote Pings/Port

Is there a way to have a data source like Ping (Multi) and Port (multi) but instead of running the ping/port check from the collector perspective but from the target server's perspective ?

4
A
3 years ago
B
bnt21046
posted in Product Discussions

Cisco ACI monitoring documenation

Does anyone have any experienced with monitoring a Cisco ACI environment?  Any good documentation that I can reference? Thanks,  

3
Michael Rodrigues
LMer
3 years ago
M
mlavhey
posted in Product Discussions

External Python Script/App to mass check specific alert states - Question on LM Alert functionality

  Hello! I've been toying around with the idea of coding up a basic app in the Windows 10 environment that has the following purpose/ functionality: The Goal:     - Produce a simple program that lists all assigned tickets by ticket number in a Descending column.  While having a LED icon of sorts next to each ticket number... RED/ GREEN to distinguish if that ticket has any active alerts. In Progress / Coding Flow:     - Parse currently assigned tickets that are tracking alerts for various devices. (Ticket system being used is AutoTask)     - Throw the parsed ticket results into a list/ dictionary.     - Scan through the list of ticket references and validate if all the alerts associated to each ticket are active or clear. (Would like to keep it as a simple boolean logic approach of True/False). That would decide whether the LED icon above would be green or red.     - Possibly add a single button that updates the list to see the current state per ti

3
A
3 years ago
M
matthew.burgos
posted in Product Discussions

How do you acknowledge multiple alerts via console?

Hello, in my environment we restart servers on weekends due to windows updates. This morning my console has all yellow warnings related to "systems uptime". I can acknowledge individual alerts, however, how do I acknowledge all these alerts at the same time?   thank you

3
A
3 years ago
Kerry DeVilbiss
LMer
Kerry DeVilbissLMer
posted in Product Discussions

LDAP Binding Security - Active Directory Domain Controllers

In December of 2019, Microsoft published a release announcing upcoming changes to LDAP channel binding and LDAP signing requirements for domain controllers. QuoteThere is a vulnerability in the default configuration for Lightweight Directory Access Protocol (LDAP) channel binding and LDAP signing that may expose Active directory domain controllers to elevation of privilege vulnerabilities. Microsoft Security Advisory ADV190023 address the issue by recommending the administrators enable LDAP channel binding and LDAP signing on Active Directory Domain Controllers. This hardening must be done manually until the release of the security update that will enable these settings by default. Microsoft intends to release a security update on Windows Update to enable LDAP channel binding and LDAP signing hardening changes and anticipate this update will be available in March 2020.This is a good thing (!) , as one Microsoft blogger puts it:QuoteIf I told you that there was a 90% plus chance that yo

6
S
3 years ago
Purnadi K
Purnadi K
posted in Product Discussions

Watching Over Tunnels

--- "To him who is able to keep you from stumbling" ---- Monitoring a tunnel to be notified if it is stumbling is what this topic is all about. Last year there was a request by one of our financial customer, a private investment bank, that uses Palo Alto Networks firewall to monitor the VPN tunnels on PAN device and although there are wide range of monitoring set with our current LogicModules, this specific feature is yet to be developed, so here comes a customized monitoring, leveraging on existing datasources. I will, again, refrain mentioning customer's name as I have no permission to use, but initial would suffice ("MB"). I had a privilege to deploy PAN device (PA-5000 series) long before layer-7 firewall becomes popular, when PAN stole the head-start in the industry. It is dubbed to be one of the sophisticated firewalls in the market even until now with its heartbreaking price (in my opinion) but it delivers its promise though. They even have virtual appliance which

3
A
3 years ago
A
Archana
posted in Product Discussions

Virtual Datapoints in Reports

Hi, I have just started working with Reports. To fetch the trend of each Metric with respect to each Device, I have choose the report type "Resource Metric Trends Report". This Report type have options only to select the Datasource, Instance and the necessary Datapoints. I am trying to fetch Percentile values of necessary datapoints respect to devices. To the dashboard, I use virtual datapoints to do the required aggregate functions and get the results. But in Reports, I cannot see the option to apply the aggregate functions to the datapoints. I would like to know how to do the customisation to the datapoints for fetching the necessary aggregate values in Reports. Could anyone please help me on this?

1
Mike Moniz
Atomic Advisor
3 years ago
N
ntw2
posted in Product Discussions

Can LM update ConnectWise Manage tickets?

For more than a year, I've gone back and forth with LM support about LM's seeming inability to update CWM tickets instead of creating a new ticket every time a datapoint's status flaps. LM support swears that this behavior is by design, but can't identify a use case for it. Moreover, this documentation says that it should be able to update tickets: https://www.logicmonitor.com/support/alerts/integrations/connectwise-integration/?_ga=2.193114093.1167024280.1578609865-61119326.1554263269 Does anyone else's LM update CWM tickets, or is their documentation wrong?

7
Mike Moniz
Atomic Advisor
3 years ago
E
Ellie
posted in Product Discussions

How to monitor a curl call with cert and key

I'm trying to monitor a curl call with cert and keys The call would be something like this: curl --key myKey.key --cert myCert.crt myurl.com Regular internal web check gives me the option of adding username and password but I don't see a way to add key and cert. Would appreciate any help!   

1
Joe Tran
3 years ago
M
Mike Smith
posted in Product Discussions

Powershell Download a Collector

I've been working on a Powershell method to download a collector. I'm to the point where I've got content, but no matter how I write the file ($content > "lm.exe", $content | Out-File "lm.exe" (tried all the encoding options), or $content | Set-Content lm.exe) the resulting file will not execute. https://XXXX.logicmonitor.com/santaba/rest/setting/collectors/1005/installers/Win64?collectorSize=small   $i = Get-LMCollectorInstaller -Account "XXXX" -CollectorId 1005 -CollectorSize small -Platform Win64 -Verbose VERBOSE: Verb:GET Epoch:1578077331506 Data: resourcePath:/setting/collectors/1005/installers/Win64 VERBOSE: Url: https://XXXX.logicmonitor.com/santaba/rest/setting/collectors/1005/installers/Win64?collectorSize=small, Method: GET, Header: System.Collections.Generic.Dictionary`2[System.String,System.String] VERBOSE: GET https://XXXX.logicmonitor.com/santaba/rest/setting/collectors/1005/installers/Win64?collectorSize=small with 0-byte payload VERBOSE: received -

3
M
3 years ago
Vitor Santos
Vitor Santos
asked in Product Discussions

DataSource polling cycle question

Hello everyone,  I've setup a datasource that retrieves data from a logfile.txt every 10 minutes (located on the collector itself) .  That logfile is populated by another script (from a proprietary language) that runs on the collector VM level (it dumps his different variables within the logfile.txt). The datasource will then retrieve the content of the textfile (using a simple powershell script) & act according to the different datapoints that I've setup - until this point I've no issues (everything working smoothly) My problem starts on the datasource polling/run cycles. The script running at the collector VM runs every 10 minutes (00:00, 00:10, 00:20, etc...) & it takes a maximum of 5 minutes to run. What I would like to accomplish is having the datasource in question running right after that maximum run time (.e.g - 00:06, 00:16, etc... ).  I noticed that the polling cycle(s) change sometimes (arbitrarily) & I cannot force those to run (when I want).

4
Vitor Santos
3 years ago
Antony Hawkins
LMer
Antony HawkinsLMer
posted in Product Discussions

Bringing Website (web and ping check) data into Service Insights

Currently, you cannot pull Website (web and ping check) data into Service Insights. These LogicModules permit you to do just that... STEP ONE: To add individual Website Checks (as opposed to a group of checks) you'll need to identify each check's ID number; as currently these are not visible in the UI I've written this PropertySource to assist: Website_Display_ID, locator code: DK4CJR You can apply this to any collector-monitored resource, or run its script externally. You'll guess from its AppliesTo field that I've applied it to an existing Service Insight in my account, that has a collector assigned to it. This will find the ID of each Website check from the LogicMonitor API, and write those back as a property, auto.website.id, to each Website check, to enable you to easily see the IDs (This will not affect other existing properties, thanks to the use of the PATCH API method): This PropertySource demands resource properties apiaccessid.key and apiaccesskey.k

0
Antony Hawkins
LMer
3 years ago
C
Cobot Collaborator
Cole McDonaldCobot Collaborator
posted in Product Discussions

Autobalanced Collector Group Threshold Calculator

I've been working with support to troubleshoot why our autobalanced groups ... don't.We use "Large" collectors as defined in the Collector Config... apparently, that breaks the expected behavior of the UI for entering rebalancing thresholds.  I was provided the math used to calculate threshold against config to get the "effective threshold."  I don't want to do that math, so I'm making powershell do it for me... now you can to:#Effective Threshold Calculation : (Target_Collector_Mem/Medium_Mem)^1/2 * Medium_Threshold# Available Collector memory as defined in the Collector Config$mem_collector = 4# 2Gb, default for medium collector$mem_medium = 2# calculates the total # of instances for all of the collectors in an autobalanced collector group#!!! change to match your instance counts from your collectors in the target group$tot_Instances = 6615+7023#!!! change to match your instance counts from your collectors in the target group# Do the math to calculate the threshold to enter to ach

0
C
Cobot Collaborator
3 years ago
Antony Hawkins
LMer
Antony HawkinsLMer
posted in Product Discussions

Running vs Startup Comparison ConfigSource (PoC)

This one's a little bit like my ConfigSource to compare a config to a static template file: It uses similar methodology, to compare the already-gathered 'running' and 'startup' instances of any existing ConfigSource via the LogicMonitor API.It doesn't gather any configs directly from the device.Example: The Cisco_IOS ConfigSource already gathers a 'running-config' and a 'startup-config' from relevant devices. This ConfigSource calls the LM API to pull the most recent retrievals of each of these, and compares one to the other.This ConfigSource can be extended to consider any ConfigSource that includes 'running' and 'startup' config instances, and/or could be cloned/edited to consider other instance pairs if the device type names them differently (e.g. 'default' vs 'running', 'original' vs 'custom', etc).The two configs are compared line-by-line and where lines differ, these are marked and alerted on.This ConfigSource demands the presence of the DataSources_List PropertySource, as it rel

4
P
3 years ago
Antony Hawkins
LMer
Antony HawkinsLMer
posted in Product Discussions

Collector ConfigSource(s)

A couple of choices of ConfigSource to monitor the .conf files of your collectors. Note these are two versions of the same thing - you do not need both. One explicitly monitors only the four key .conf files; agent.conf, sbproxy.conf, watchdog.conf, wrapper.conf. That's done via the Active Discover script simply printing those four known filenames as instances: 76PEZ2 (v1.2) The other version has a more involved Active Discovery that lists any .conf found in the Collector config folder, with the exception of 'persistent_task.conf' as this file is continually being updated. This has the advantage that it will catch any new or renamed .conf files we add in in future: K992D7 (v1.2) The collection script of each simply reprints the content of each .conf file and alerts on changes, with a couple of exclusions for expected changes. AppliesTo = hasCategory("collector") They are grouped to appear within the 'Collector' datasource group on the devices alongside

3
C
3 years ago
Kerry DeVilbiss
LMer
Kerry DeVilbissLMer
posted in Product Discussions

Tesla Motors LogicModule Suite

I previously published a datasource for a href="https://communities.logicmonitor.com/topic/1245-tesla-motors-battery-statistics/" rel="">Tesla Motors Battery Statistics - which presents compelling vehicle battery and charging information that is fetched from the Tesla REST API. To complement those efforts, I've written a few other Tesla Motors LogicModules that return a variety of different, but still interesting, datapoints - including a ConfigSource that displays configuration information about the vehicle itself (are the doors locked? Is the sunroof open?) The following is a list of all the Tesla Motors LogicModules now available (see the above-linked post for additional info on how this all works.)DataSource 'Battery Statistics' tracks battery and charger performance and health metrics (a href="https://communities.logicmonitor.com/topic/1245-tesla-motors-battery-statistics/" rel="">previously posted to the Exchange but included here for sake of keeping everything together.)

3
PatrickATL
3 years ago
Antony Hawkins
LMer
Antony HawkinsLMer
posted in Product Discussions

ConfigSource to compare to a known template (PoC)

LM Config is awesome - but until now you've not been able to compare a config to a "known good" template.Now you can...Edit for v1.4.0+: Now gives a MUCH cleaner output (in my humble opinion) - see comments below for details. v1.4.0: 2GTW7WIf you really want the earlier version with its more expansive output, v1.3.0 as detailed in this first post is at XHDDP4Edit for v1.3.0+: The groovy check that picks up on the change-from-template flags is now more flexible, in that it looks at each line in turn (rather than the entire config object) so you can more carefully identify matches to be alerted on.This is very much only a proof-of-concept, which will show the method to use. As written it will do nothing in your account as it looks for a couple of test files I created specifically for this in my account.Suppose you have this template file (configTestTemplate.txt) for a config:# Config test file:# Here's a config test fileSetting1=1Setting2=2Setting3=3# The above must never be changedNow,

5
J
4 years ago
Kerry DeVilbiss
LMer
Kerry DeVilbissLMer
posted in Product Discussions

Export Netflow from Linux to LogicMonitor

Exporting Netflow from Linux with softflowd NetFlow is an industry standard network protocol for monitoring traffic flows across a network interface. It is used most commonly by devices like firewalls, routers, and switches, but some software packages make it possible to export Netflow data from a server operating system - in this case Linux (with softflowd) - to a Netflow collector (LogicMonitor) for traffic analysis. Ubuntu Documentation here: http://manpages.ubuntu.com/manpages/xenial/man8/softflowd.8.html The following assumes you have an Ubuntu device in your portal which you can access with sudoer permissions. It also assumes Netflow has been enabled for the device and the collector in question. Install softflowd: sudo apt-get install softflowd   Open  /etc/default/softfl

0
Kerry DeVilbiss
LMer
5 years ago

Badge winners

Show all
Terms & ConditionsCookie settings