Jeff Behl

LogicMonitor Staff
  • Posts

  • Joined

  • Last visited


0 Neutral

About Jeff Behl

  • Rank

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Hi Mark, Certainly an understandable request. While not intrinsic in LM itself, it is possible to manage some aspects of your account in a programatic and versioned way via our integrations with Terraform and Ansible. Beyond that, there is work underway that will help with some of what you mention: Undelete for hosts and groups (upcoming release v103) "safe import" for data sources (various aspects coming out over the next 2 quarters) LM Exchange: a versioned history of data sources from within an account (Q3/Q4). Safe import is a pre-requisite to this. Jeff
  2. Hi sfrancis, Thanks for the comment. We've discussed log monitoring but not tackled it for a number of reasons, one of which being that the Splunk's, SumoLogic's, etc., of the world are very robust tools that do what they do really well especially when it comes to the terabytes worth of data that is often thrown at them. Most companies have a solution like this in place already, so integrating with them more tightly is our preferred path at the moment. Having said that, "push data" is something we've got on the docket for next year. While that certainly will include technologies like StatsD, it's not to the exclusion of other formatted data (eg JSON payloads) where something like a ELK may be the right endpoint. We already take in "events", so it's not too much of a stretch. To be determined, and input welcome. Jeff
  3. Hi Paul - Its a good request and well directly support this in the future. In the meantime you can integrate with a SAML v2.0 IdP:rn all SAML IdPs support two-factor authentication, including the SaaS IdPs listed at the bottom of the page who we have directly partnered with. rnBy delegating LogicMonitor authentication to one of these services, and enforcing two-factor there, youre effectively enforcing two-factor for LogicMonitor access.rn rn
  4. Hi Rodger - By no means a robust solution, but perhaps of interest since you mentioned option 4) above: it is possible to generate NetFlow data from pretty much any linux distro using a tool called fprobe. We used it in some of our testing. It simply will capture whatever traffic it sees flowing over a wire and export NetFlow data based on it. It looks like nProbe is also an option, but I'm not familiar with it. It looks like it has a lot more documentation associated with it. Jeff
  5. Hi Rodger - While certainly not providing you with all you're looking for, you might get some use out of the Ping (Multi) datasource. It will allow you to ping multiple IPs/hosts from a collector to to see latency and packet loss. From its description: Ping multiple locations. Note: even though this can be applied to an arbitrary host, the source of the ping will always be the collector. This being the case, it makes the most sense to add instances to the host the collector is install on. Where I've used it in the past is for monitoring both the internal and public IP address of a VPN endpoint from one data center to another. Having both of these addresses monitored allows me to quickly determine if there is an issue with the VPN tunnel itself, or with the ISP. I've also added the default route that the client router uses in order to see if the first hop from the client router (the ISPs router, presumably) is the issue. Add an instance for each destination hostname/IP. The Name and Wildcard fields should probably be the same, though the collector will try to ping the value of the Wildcard field, which can be a hostname or an IP address. DNS resolution will be from the perspective of the collector machine, so pinging internal host names is possible. Finally, do note that we support NetFlow, so if the equipment you are utilizing supports it, it can help. Our NetFlow will receive some very nice new features in the next few releases, so stay tuned... Jeff
  6. Hi Niels - The way we usually address a situation like this is in to clone the datasource for the Netscaler LBVS and modify the Active Discovery section to include a filter that will only match LBVS in an OUT OF SERVICE state. You could then modify this new datasource to not alert on ServicesUP. n nOn the original datsource for LBVS, you would then add to the Active Discovery section the same filter as used in the cloned datasource, but making it NOT match LBVS in the OUT OF SERVICE state.n nWe would be happy to do this for you if you would like, just send in a request to, or ask away if you need further information on this.
  7. So this question was actually asked by a customer. A little bit of digging brought me to HP SNMP Agents for Citrix XenServer:n n nInstall this, make sure the SNMP community in LogicMonitor is correct, and you are ready to go. If the new datasources dont show up, try right-clicking on the host More... -> Run active discovery. Refresh the screen after about 20 seconds and you should be good to go.
  8. I\'d like to monitor the health of the RAID on my Dell server running CentOS. It\'d be good to monitor fans and power supply status as well. How do I do this?
  9. How do I rebuild my Windows Management Instrumentation (WMI) registry if it is corrupt?
  10. We dont monitor OpenLDAP natively at this time, though, as with most any sort of monitoring issue, our system can be extended by the use of an external script to do (see the help page on the script collector for more information).n nOpenLDAP monitoring involves exposing the monitoring statistics on the server:n n nIf a simple script is written that exposes the relevant metrics in key/value pairs we can easily start monitoring and plotting the output. Such a script would output in a format such as:n nAbandonCompleted : 43727n nAbandonInitiated : 43727n nAddCompleted : 0n nAddInitiated : 0n nBindCompleted : 55412296n nBindInitiated : 55412296n nBytes : -1n nCompareCompleted : 0n nCompareInitiated : 0n nDeleteCompleted : 0n nDeleteInitiated : 0n nEntries : 55091425n nExtendedCompleted : 80711n nExtendedInitiated : 80711n nModifyCompleted : 0n nModifyInitiated : 0n nModrdnCompleted : 0n nModrdnInitiated : 0n nOperationCompleted : 198415249n nOperationInitiated : 198415250n nPDU : 198512590n nReadWaiters : 225n nReferrals : 0n nSearchCompleted : 87929375n nSearchInitiated : 87929376n nUnbindCompleted : 54949140n nUnbindInitiated : 54949140n nWriteWaiters : 0
  11. Hi Rick - n nWe dont have the specific documentation for this on our API documentation page yet ( ), but it is available via the addAccount() method. The call is:n n/santaba/rpc/addAccount(String username, String password, Stringn nphone, String smsemail, String smsEmailFormat, int[] roles, Stringn nstatus=active)n nTo get the list of roles:n n/santaba/rpc/getRoles()n nCombining this with the information on the API page should provide enough information for scripting it, if that is what you would like to do.n nOf course, if you would like us to do a bulk import for you, please dont hesitate to contact
  12. Hello - We dont have a limit on the size of the email we send out. Syslog messages themselves are generally limited to a maximum size of 1KB, per RFC. If you could post an example of your syslog message from a log file (please dont forget to obscure any non-public information!) we can look further, or just contact with the information
  13. Hello - We should be able to get TCP VIPs statistics without a problem. If you could bounce us a message to with the specific Netscaler name and TCP VIP name in your portal we can investigate this. While HITS is open to interpretation, Im sure something along the lines of incoming SYNs and established connections could be available.
  14. ---------------------------------------------- nCevin Doppmann, Apr 27 15:10 (PDT): n
  15. How do I get hardware monitoring for Citrix XenServer running on an HP server? I would like to know the status of the RAID, Fans, power supply, chassis, etc