• 0

Stop SQL instance monitoring


autarch
 Share

Question

What is the best way to stop LogicMonitor from monitoring SQL instances?  We've restricted the Service Accounts access to our DBs but now we are getting SQL/Windows Authentication bad logon attempts in our DB logs.  Our goal now is to simply monitor the OS where our DBs run and use other tools our team is more familiar with for DB monitoring.

Any advice is much appreciated!

Link to comment
Share on other sites

3 answers to this question

Recommended Posts

  • 0
  • Administrators

You'd need to figure out which tasks are running that are attempting to log into the SQL instance. This can be done through the collector debug console looking at the output of !tlist and !adlist (and maybe !aplist). You can filter by host on all these commands so that you can see which tasks are hitting the server. Then note the LogicModule name. Go to the LogicModule and adjust the AppliesTo so that it doesn't evaluate to true. The nuclear option is to add " && false()" to the AppliesTo, which turns off the LogicModule entirely. Alternatively, you can put a property into the expression and require that property exist on any devices you do want to monitor, effectively shutting down the LogicModule.

Link to comment
Share on other sites

  • 0

Looks like the following DataSources must be set to "false" for the service account to stop polling the SQL instances:

  • Microsoft_SQLServer_AgentJobs
  • Microsoft_SQLServer_AlwaysOnAvailabilityGroups
  • Microsoft_SQLServer_AlwaysOnAvailabilityReplicas
  • Microsoft_SQLServer_AlwaysOnDatabaseReplicaCluster
  • Microsoft_SQLServer_AlwaysOnDatabaseReplicas
  • Microsoft_SQLServer_Databases
  • Microsoft_SQLServer_GlobalPerformance
  • Microsoft_SQLServer_SystemJobs
  • Microsoft_SQLServer_Troubleshooter
  • Microsoft_SQLServer_FailoverClusterNodeStatus
Link to comment
Share on other sites

  • 0

You can also look at breaking LM's auto detection of MSSQL by disabling the PropertySources that apply the MSSQL category like addCategory_MSSQL (there might be more). You will need to manually cleanup any existing MSSQL devices to remove existing MSSQL categories. But doing that then let you selectively add the MSSQL category manually if you have a few servers you do want to monitor later. This is likely less important for businesses but super useful for MSPs.

 

  • Like 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share