16Views0likes7Comments2021-12-15 US Office Hours
Thanks to Dave Femino with our Product Management team for stopping by with a demonstration of our new LM Logs search capabilities! Please fill out our survey to let us know how much you like our webinars. Here's a list of the questions asked and the times when they were asked. Q: [17:01] Very cool. Will those Aggregates be available as widgets to put on a dashboard?with the login issues that plagued many services providers today. is there a secondary portal we can access like tenantname2.lm... Q: [21:58] Unrelated to logs: Wondering if there is a way to do reporting on configs? Like an aggregate of a specific config for many resources OR all resources that have a specific string in a config, etc. I guess the other use case was having a way to aggregate a small config from many devices into a report. I didn't see that within reports but was hoping there might be some roundabout way to do it Q: [26:54] (This is long so if you want me to verbalize it I can.) We have some DataSources where the Collect script fails to run successfully, and in the Raw Data we get No Data for some DataSources and _no rows at all_ under Raw Data for other DataSources. In each case there are Datapoints which are set to raise an Alert for No Data, but that's not happening - apparently because the script is abending instead of completing. I've developed a work-around for custom DataSources, but we don't want to have to customize ones with this issue that are coming from the Core Repo. Any suggestions? ("Please contact Support" is an OK answer!!!) Q: [33:09] with the login issues that plagued many service providers today. is there a secondary portal we can access like tenantname2.lm...? Q: [34:20] Is this discussion a logging only or can we address alert levels and escalation chains? Q: [34:35] any plans on updating the mail lib Q: [35:15] I may need to verbalize my situation. I have multiple levels od support and need to direct alerts to 1st level for 30 minutes, ect Q: [44:08] Any plans to incorporate iperf or any other bandwidth testing tools into the collector? Anything that you can run on a Collector you should be able to wrap in a script, and then call that script from a DataSource. We're doing that with great success - although not the tools you mention. Do you have a link or example that explains this process more? Q: [46:35] can an event source output an info level alert. so far only warning (yellow) show up in my event source widget. Q: [47:40] I think I fully understand how Custom HTTP Integrations work, in that they originate from the LM infrastructure and not from Collectors. We would like to be able to have an Integration (or the functional equivalent of one) send the outbound HTTP/HTTPS call from an internal Collector instead. Any thoughts on something like a custom DataSource which could trigger a webhook, originating from a Collector? (I think such a DS would have to poll the Alerts API which might not scale well.) Q: [49:36] Is there any DataSource available for tracking Santa? Seriously though, is there a master go-to list of any / all public & private LogicModule collections that are not in Exchange? Post webinar note: Stay tuned here. I found some stuff and want to play around building what i can build. There may even be a blog post coming.13Views0likes2Comments2020-12-16 Office Hours
Have questions about how to best use LogicMonitor? LogicMonitor experts are live to explain best practices and answer your questions. There are no planned topics as this webinar is a true office hours. Bring your coffee and questions! US Session registrationhere EMEA Session Registration here5Views1like3Comments2022-03-30 - US Office Hours
The 3/30 webinar had questions about: Alert rules Alert tuning DataSources Vs. ConfigSources and one at the end that we were not able to answer. (The answer was StackStorm!https://www.logicmonitor.com/support/stackstorm-integration-overview) The recording: Please fill out the survey:https://docs.google.com/forms/d/e/1FAIpQLScPWW5DzNxe2W5ieh6PjamLYWcP5AhDbUl1E3U7ZKryEgwEoA/viewform?usp=pp_url&entry.2118543627=2022-03-30&entry.2116906043=US/Americas5Views1like0Comments26 AUG 2020 Office Hours
At LogicMonitor, we recognize that your business and infrastructures are under increased strain due to COVID-19. To assist you in monitoring your vital infrastructure, we would like to personally invite you to join us at 11am PST, Wednesday, August 26th, for anotherLive Training Webinar Office Hours. Have questions about how to best use LogicMonitor? LogicMonitor experts will be live to explain best practices and answer your questions.Register now!4Views0likes8Comments27 MAY 2020 - Office Hours
You can view the May 27th recording here: We'd love your feedback, so please take a moment to respond to our survey: https://docs.google.com/forms/d/e/1FAIpQLScPWW5DzNxe2W5ieh6PjamLYWcP5AhDbUl1E3U7ZKryEgwEoA/viewform?usp=pp_url&entry.2118543627=2020-05-27 We'll be having another Live Training Webinar in two weeks (and if you've watched the video, you might be able to guess the topic). Register here. All of the questions were answered in the video, so please watch the recording. The questions are listed here in the same order asked for search-ability: I want to know about the Datasources configuration. How to do it. I want to know about the integration between the alerts and auto-ticketing hi Stuart, is there any report available OOB similar to a heatmap in CAPC? Also, what's the best way to get an Availability/Reachability SLA report for multiple remote locations? Hi Stuart!! We have had Collector load (overload!) issues off-and-on for quite a while. The biggest challenge is usually about how to track down which DataSource (or family of DataSources) is impacting a set of Collectors. Do you have any tips / tricks on how to drill down from a Collector overload condition to find out what exactly is generating the overload? is it possible to group interfaces from different devices? For instance, if we have 100 remote locations with 2 internet circuits each, can we group those 200 internet circuits into a single group so we can easily identify the port where circuit is terminating instead of navigating to different location and then trying to find where the circuit interface is? how can i protect my system from blowing up after upgrading datasources? i have some exclusions and "tweaks" to some of them. for example, i exclude the vmware host level vm disk space check because vcenter also does it. when i upgrade datasources, it adds back the defaults which causes be to get hundreds of alerts that were excluded previously a confusion/question related to netflow - as opposed to NFA, in LogicMonitor, netflow is shown at device level instead of interface level. So if we have flow export configured on multiple interfaces from a single device, would that show aggregate of all interfaces? this might show how effective ABCG is? or at least give one visualization showing how ABCG might be moving devices (and their instances) around? One feedback; alternatively a question. The SDT panel is somewhat cumbersome, if you have a number of alerts to SDT. Lots of clicks and confirms. Ideally, a couple hot buttons, like "Put in downtime for: 5 min, 30 min, 2 hours, 2 days", etc. The fewer clicks, the better. I provided this because we seem to have a number of services that have numerous alerts, all of which tend to fire when the service/server I down (multi-tenant apps, etc.). Ever since the Nagios days I've wanted cascading alerts. For example, if a database is down, I KNOW that every single app on a host, or even several, will be down. I don't need all 30 apps to complain if the database is out, so it peeves me to have to SDT 30 apps. Is it possible to link alerts in a hierarchy or dependency chain so that only one alert goes out for significant outages? Another example, if the power in the data center goes out (or a battery back catches fire - it HAPPENED!), all the servers don't need to report." Safe Logic Module Merge. Best thing since Sierra Nevada Summerfest Lager. Hi Stuart, there are various devices in the environment, mostly routers and switches with parent-child relationship. Can LogicMonitor read the dependency like parent-child relationship in the devices so that number of alerts can be suppressed? Also, can it read the topology mapping from the network itself? or we still need a Discovery tool?4Views0likes1Comment
2022-04-27 - APAC Open Office Hours
27th APRIL 2022 - APAC Open Office Hours : How to add devices in LogicMonitor ? Managing AWS and Azure devices using Tag Filters . Managing Alerts on Eventsources . Please fill out the survey https://docs.google.com/forms/d/e/1FAIpQLScPWW5DzNxe2W5ieh6PjamLYWcP5AhDbUl1E3U7ZKryEgwEoA/viewform4Views0likes0Comments2021-11-17 US Office Hours
Thanks for attending today! Please fill out our feedback survey to help us keep programs like this going! Questions asked during this webinar: [1:25] I recently discovered that a couple of our Collectors in a couple different ABCGs are provisioned with more memory than the others, so I bumped those with 16+ GB up to X-Large while the others are still Large. Is this a Really Bad Thing? I couldn't find anywhere in the docs that talks about good-or-bad for mixing Collector sizes in a Group, only that the versions need to be the same. Thoughts? Oddly, the one I made X-Large has the least Instances!! It's been running for more than a month that way. Does the load-balancing not happen based on CPU and/or memory load? D'oh! Got it now. I need more coffee apparently. Thanks!!! ? [5:55] In the SNMP_Network_Interfaces datasource, why is ifindex written into the instance name? If the interface index changes (on a device reboot for example), the instance will become stale. but the port is different? We get duplicate instances when they forget to turn on the index persistance. Usually it clears up if we remove them all and re-discover yeah thats what we noticed, thanks [10:17] We are currently set up with one local collector per site. All these collectors are set up to have their failover collector be the main" one at our main site. The problem we're running into is that when the Internet connection at one of the branch sites goes down, we fail over to the main collector at the main site and then get a ton of alerts about sites at the remote site being down. Is there any way to avoid these alerts? Hope this makes sense. I forgot to mention that we have VPN between the main site and the branch sites Okay thanks for the info [18:19] Follow-up question to my previous main/remote site collector issue. Is there a way to have failover collectors that require manual fail over (vs. automatic)? Okay makes sense. But failing back would be tough because we would have to pick and choose which devices to fail back to the remote site right? [Answered after webinar: Yes, you'd have to maintain that mapping back to the original collector. Naming standards might help with that.] [12:25] Is there a way to do SDT for just the weekend days? We have a need for SDT for servers in Azure that we take down starting at 8:00PM on Friday until 8:00AM on Monday. So alerts will go for those 15 minutes then? [16:00] We have a LM web site monitor that monitors an https: connection to an Apache Web server instance. Each monitor attempt generates a pair of entries in the web server's error log Error occurred during SSL processing, error = 406. SSL initialization operation failed, return code error = 3426. Is there a setting we can change on LM to prevent this? SSL is "required" for this instance [20:10] Apologies if this was already covered, but how do I import a MIB file? I have my watchdogs monitored but none of the SNMP attributes show up. [22:43] I have a weird and hard-to-explain thing. Mind if I verbalize the question? It's about an EventSource and the size of the data it's putting into the ##VALUE## Alert Token. [27:28] I sometimes get alerts for System Event Log Errors. The Datasource can be modified to exclude a specific event ID. I do not want to modify the Datasource. Can an event ID be excluded for individual resources (servers)? Also, I have modified the filter for some event ID's. If I install an update, will I lose my custom entries ? Am interested in doing it at the group level. where did you go for applying at group ? [33:04] We have a customer (we're a sort of MSP) where they want to have custom Thresholds and/or Alerting on/off for individual Instances of NetApp Volumes. Since Instances in this DS come from Active Discovery, I believe the only way to have per-Instance settings is to have an external script do that via API. Is that correct? [37:07] If nobody else has questions, is there anything new / cool you want to show from v160 or v161? [39:36] Is there an easy way to monitor servers for Missing Windows Updates? How about expiring SSL Certificates? @Nick the relatively new DS "SSL Certificates" lmLocator: J3K9WC is actually so good at finding services with certs that we have found things using certs we didn't even know about!! We use that Windows Patches Needed and it's AWESOME. We use the Windows Patches needed datasource and it works great. The limitation is that your server must be able to hit the MS Update websites. It won't work if your servers use WSUS / cant hit MS Update. We have wmi.user on most of our servers Locator code for _Windows patches needed DataSource: N7R7YZ [43:07] From the v161 release notes: LogicModule Snippets "Snippets are pieces of reusable code that enable quicker updating of modules, consistency across suites, the ability to use classes when developing modules, and more. Module snippets are stored and automatically distributed to Collectors every 24 hours. Support for snippets requires Collector version 30.000 or higher." there is a module in the release as well that references it Cisco UCS (1 Module Snippet) "The request body for login has been updated to accommodate double quotes in passwords." [43:54] I have not used a script from the community before, would it be possible to walk through using the N7R7YZ ? [48:02] What is the best practice for keeping these DataSources Updated? Does everyone simply update all of them on a scheduled basis? Never update? Our CSM got us a limited-use "sandbox" portal, where we import all new modules as soon as they are released, then after evaluation we bring them in to the prod portal. It's manual, but there are some API endpoints that might work. We do it manually because it's so quick to do with practice. One tip for module updates: When you look at the "diff" in the UI for an update, it's structured JSON for old and new. You can pipe JSON through "python -m json.tool" to sort it, and then you can do a standard command-line "diff" to see what changed in a way that's more clear than the UI sometimes! [54:05] Since nobody has entered any more serious questions.... Just curious... Do the LM developers ever sneak out "easter eggs"? Case in point I have written some custom scripts which include fun stuff in the HTTP headers.3Views1like1Comment
