Joe Tran

  • Content Count

  • Joined

  • Last visited

  • Days Won


Everything posted by Joe Tran

  1. I would attempt to build a PropertySource (I'm a novice at Java and Groovy) to grab the license information you want to regex over and build dynamic groups based on said property. Tune Alert Thresholds at the group level as you suggested.
  2. I hate time, time math, time zones, and Daylight Saving. Is this a case where the server's timezone is not in GMT? It looks like the Web UI will translate the time to the time zone set in your Portal Settings. Time zones and Daylight Saving are usually my first suspects whenever I see unexpected time discrepancies that are off by whole hours exactly.
  3. We use LM Cloud with multiple AWS accounts and dump the instances/devices into a common folder where no meaningful alert rule is applied. We use Dynamic Groups sort the discovered instances into appropriate buckets. Cloud Devices don't render a "Member of these Groups" section on their info tab, unlike Standard Devices. Having this would help my team understand why any particular alert rule is being triggered.
  4. Hi Sarah, As far as I know, I should be able to visualize aggregate device data using a Custom Graph widget. This is something that is lacking for Services though. My coworkers in the business analysts teams do import LogicMonitor data into Tableau. Thanks, Joe
  5. I'm on hour 17 of a run of a script that pulls down Service responseTime data for about 345 services so I can come up of an average across all of those services from the last quarter. I would love, LOVE a built-in option or parameter to aggregate this data in the API call.
  6. Support confirmed that currently JSONPath filter expressions are not supported in Web Services checks. So this is going to be JSONPath expressions that contain: ?() This functionality is supported by Device Datasources, so I can't imagine this is too difficult to implement for Services.
  7. In case some of you are not aware, Microsoft released Linux-compatible version of PowerShell. I would love to see the Linux Collector come bundled with PowerShell so it can be supported natively. Just for giggles, I installed PowerShell on a random RHEL 7 collector and tried to use the !posh debug command, but sadly it didn't work .
  8. Please add native support for discovery of ECS metrics by ClusterName AND ServiceName dimensions!
  9. If you mean being able to add widgets to a Device Dashboard, then yeah that would be great! But as a workaround, you could use the Alerts tab or Dashboard's Alert List widget and adjust the filters. Changes in state would be captured there and would be more explicit about trigger times.
  10. I guess I need to read the support documentation better. Looks like the last two items are moot points if I configured my netscan correctly. However I still stand by the first two: - Token to name a device based on AWS tag... most convenient would be the Name tag. - The ability to exclude devices based on region
  11. - Token to name a device based on AWS tag - The ability to exclude devices based on region - All AWS tags should be imported/populated/inherited - Netscan should populate the property instead of system.ec2.resourceid. The former is actually used by the default AWS_EC2 datasource. Probably moot if my third bullet is done.
  12. So I've opened a few support cases about #2 on my list--custom properties and tokens for clusters. At first I was told it should work already. So I went ahead and implemented a process that I now find won't work at all because what I was initially told was incorrect. So the #2 is very much high on my wishlist.
  13. I have a device group that has the same datasource applied. This datasource auto-discovers and will spin up matching instances across all devices in the group. I would like to have clustered alerts based on the matched instances across all devices in the group. For example, (pardon the ASCII-like visualization) ClusterGroup |__ Device1 | |__ DatasourceA | |_ Instance_ABC | |_ Datapoint_I | |_ Datapoint_II | |_ Instance_DEF | |_ Datapoint_I | |_ Datapoint_II | |_ Instance_GHI |
  14. We recently ran into an issue where we are unable to monitor one of our web apps due to the lack of support for TLS 1.1 and 1.2 with strong ciphers. My company would like to see support extended to include the following ciphers: ECDHE-ECDSA-AES256-GCM-SHA384 (Only supported in TLS v1.2) ECDHE-RSA-AES256-GCM-SHA384 (Only supported in TLS v1.2) ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA AES256-GCM-SHA384 (Only supported in TLS v1.2) AES256-SHA256 AES256-SHA
  15. That depends on if we can get the absolute time (in hours:min) Available along with the existing metrics (absolute 'Not Available' & % Available). My request was focused on the "Website Service Overview"report so not sure if what you're working on applies in this area as well.
  16. Our reporting team is being raked over the coals (and dragging me along with them) because they are unable to reliably and easily pull Services availability when Services are ticking downtime when they are in SDT. A similar option to Calculate no data as Available where the "Website Service Overview"report can "Calculate SDT as Available" would be VERY appreciated.
  17. Unfortunately this applies to everything I've seen within LogicMonitor. I renamed an Integration right before leaving last night, hoping for an entire evenings worth of data to look at, only to find that the Integration didn't get invoked. The Integration references in Escalation Chains also needed to be updated too.
  18. I would love it if we could reference ##SERVICESRESPONSE## on an overall alert. We don't deliver alerts for singular test location failures, since our mandate to only notify on systemic issues across all test locations. So the question will probably, which response to include in the event there are differing responses? Why not include all of them! Or only include the first one in the test location array for that service. Or pick a random one. Or arbitrarily decide certain failure reasons have a "higher" priority than others and choose the "highest" one.
  19. I'm coming around to love clustered alerts as more of my company moves to dynamic environments. But I really need to be able to customize the email alert messaging for clustered alerts. So I would like to see two things: 1. The ability to set a custom alert message per clustered alert 2. The ability to assign properties to clustered alerts so that they can be referenced in the alert message via ##TOKENS##.
  20. I'm attempting to pull a report of 400+ services using a wildcard filter for the service name (because of the limited grouping functionality of services) for the last calendar month but I'm being thwarted with "The report is too large, and can't be generated" error messages. I really only need aggregate monthly values for each service in CSV format. The ability to more finely tune data sample intervals in report output would do much to reduce the reports size. Or provide a way to produce reports of this size Creating smaller
  21. I'm confused, are you saying you are receiving device down alerts (Host Status) when the assigned Collector is also down? It's my understanding that you should only get the Collector Down alert and the alerts for assigned devices should be silenced.
  22. We install our Windows Collectors with the Local System account (our environment unfortunately contains multiple domains without transitive trusts) and rarely define WMI credentials unless we need that information. The Active Discovery tasks that use PERFMON or WMI (ad_pdh & ad_wmi) are still trying to beat against our monitored Windows Servers with said Local System account and it's causing my Windows Server admins to complain to me that their security logs are filling up. I've taken the extreme measure of going through all of our isWindows() datasources/eventsources and updating them t
  23. You should be able to set a custom threshold (blank blank blank) for that datasource instance. That should make that alert reset and never appear again.
  24. We have worked with other monitoring platforms like SolarWinds and CopperEgg that offer a way to collect data or closely simulate web end-user monitoring. SolarWinds Web Performance Monitor (WPM) borrows the Internet Explorer rendering engine to perform pre-recorded web transactions and return performance data, like how long each web element took to load and render. Their player-based deployment allowed us to deploy monitors in multiple locations. CopperEgg Real-User Monitoring had us inserting a small javascript snippet to our website html to return transaction data each time the page was a