LM SaaS M365 monitoring
Anyone using LM SaaS-based Office365 monitoring and can check something for me? With the legacy/deprecated Office365 checks, LM would collect many of the stats by using the GraphAPI. This works by downloading a CSV file from M365 which provides 7 days of data. The problem is that this CSV file, at best, is atleast one day behind but frequently even more behind than that. I covered that issue in an old post about it here. Can someone confirm if the newer SaaS method has the same problem? I don't currently have it but looking at the DataSources it says it uses a method of "SAAS OFFICE365 CSV REPORT" and there is still a "Data Offset" datapoint, so I assume it will have the same problem. As far as I know, that is the only way to get this information from M365 so it's kinda understandable. But I guess it's possible LM can do some special backend thing to backdate the data, since they control the whole process, but seems unlikely. You can likely tell by looking at the "Office365 Email Activity" graph with a 30-day change, and check if weekday spikes are offset into the weekend. Assuming most email activity will be M-F for your environment(s). Thanks!
How is Escalation Chain throttling supposed to work?
Hi, We had a power outage at a data center yesterday which obviously caused a whole bunch of alerts. We have our settings set with 20 alerts over 10 minutes causes the Chains to throttle. The throttling seems to kick in just fine, but with one big problem. Instead of LM sending us 100+ tickets about all the things that were down, it decided to send us 100+ tickets telling us the Chain was throttled and it wasn't going to send us ticket any more. That doesn't seem like it's working how it's supposed to work. I'd rather get 100 tickets that were for actual alerts than 100 tickets telling me I'm not going to get any more tickets. Anyone run into this before?Using data from another datasource
Hi, we are creating a new datasource that needs data that is already being collected on another datasource. It is possible to use that data already collected instead of polling the device again? Our need is to re organize collected data on another way to simplify the LM Services creation as it cannot filter instances by any instance property. Thanks!
Static Thresholds
I am trying to set static threshold for SQL Server Databases, State at the group level. My criteria is to set warning for any value but 0 (online), and Error for 4-6 (Suspect, Emergency, Offline). I set up static threshold for warning: All Day when the State value is not equal to 0 will trigger warning. Then I tried to do it for error 4-6 values but Logic Monitor says that I can only have one All Day static threshold. How do I set it up so it has all these requirements? (Do I just set up multiple thresholds with different time frames?) Warn anything but 0 (online), Error for 4-6 (Suspect, Emergency, Offline).Module Toolbox AppliesTo IDE
I have a new DS to build. I decided, for the first time, to try to build it in the module toolbox instead of the UIv3 editor. I guess "Resource Label" is the display name of the module. That's confusing because it's not the name of the resource this will be on. I guess I can see that it's the label that the module will show up with under the resource. But it's not the label of the resource. It's the label of the module. Technical notes - i guess this now supports markup. Which markup? hypertext transfer markup? Extensible markup? Why not markdown (or does it mean markdown when it says markup)? My big problem is with the "IDE". Only developers would think the word "IDE" makes more sense than "wizard". Most of them are Java/Groovy developers who actually need an IDE to develop in a language as overly complicated as Java/Groovy. This thing is not an IDE but a field picker. Functionality that used to exist is no longer there. When I'm developing a datasource, i usually limit the first runs to one device. I opened the "IDE" hoping to find a way to search for the device and limit it to that device. I could do that in the old UI really easily. I don't even know where to start with this new "IDE". The "IDE" does not auto-complete properties. So even if i started typing out "system.display" it doesn't even suggest a complete property name. Once i get "system.displayname == " into the appliesto, it doesn't suggest display names to choose from. I know LM knows how to do this because they do it with the LM Logs query window. Why is there a big help section in the middle of this "IDE" describing what the "true()" convenience function does? I didn't select it and i'm not using it in my appliesto. Why is the "IDE" so big? Why can't it pop out in a drawer from the left side? I was worried that the cancel button might cancel the progress i've made on the DS so far. Speaking of the cancel button, why is there no "you'll lose the progress on your appliesto if you cancel. are you sure you want to cancel?" warning? Why are we still choosing the collection mechanism type (batchscript in this case) before getting ot the collection setting? Why is the discovery group method selected before instances even exist? Did someone actually say, "it makes more sense to go through the effort of moving this above the discovery arguments"? Why are the results for testing active discovery still not shown in groups? I hit save before putting in a name/resource label. It marked them as red, but didn't scroll up to them. It looked like nothing happened when i hit save.
Automate the Infra Alerts
I need to perform the poc on the self-healing part to ensure that any infrastructure alerts that are triggered automatically will result in the job being triggered and resolved depending on the circumstances. So that, customers can reduce the resources and time needed to fix common infrastructure issues.
SQL Server Connection Status critical
I added SQL server to Logic Monitor. All properties are correct. I have SQL Server Connection Status critical error: Database connection returned an error of 1.0 on ...... Value 1 : General/Unknown error. I also have SQL Server Troubleshooter with this message: MSSQLSERVER error: Read timed out ClientConnectionId: ..... SQL related data sources are not getting any data for monitoring. WMI permissions are correct. SQL permissions seem to be correct too. I am not sure what is the Read timed out message related to. Any ideas how to troubleshoot this issue?UIv4 instances when there are none?
Perhaps I just wasn't paying attention previously, but does the new UI show everything has an instance even when it's not a multi-instance DataSource now? Is that a recent change? It automatically jumps to the "instance" when you click on the DataSource entry so not really causing an issue but kinda threw me for a loop when I thought a DataSource I was working on was somehow creating instances when it shouldn't. Seems kinda odd and perhaps confusing when training on what instances are if everything looks like it has one.
