Recently active topics

UPDATE for 2026:We’ve updated our docs sites! Go to https://docs.sciencelogic.com/ and check out our FIVE new sites -- we broke things out by product to make it easier to find what you need. If you go to https://docs.sciencelogic.com/, you might think that there is only one documentation site at that address. However, the ScienceLogic Documentation team maintains multiple "sites" at that location. Here's a quick primer on each site, and what you can find there.The docs sites maintained by the Documentation team include the following:https://docs.sciencelogic.com/latest/ - the "main" docs site, which contains all of the various in-depth manuals for the different features for SL1, SL1 PowerPacks, SL1 PowerFlow, and PowerFlow SyncPacks, along with additional supporting docs. https://docs.sciencelogic.com/release_notes_html/ - the release notes site, which contains brief, release-specific documents for all ScienceLogic products. https://docs.sciencelogic.com/restorepoint/latest/ - the Rest

I am sending events to the SL API to create an Event with ‘Use Message-match’ enabled. Sometimes the source will send events to the API which would just have a issue ID changed, but relating to the same event.  For example. First post: Issue: broken ID: 39393Second post: Issue: broken ID: 53291 I want SL to group the events based on the issue, at the moment it would create a new event.  This is my regexpartner=(.*?),sndinterface=(.*?),resourcetype=(.*?),rcvid=(.*?),rcvinterface=(.*?),status=(.*?),glbID=(.*?) In essence, i want SL to ignore the last field (glbID) when it tries to match the events.  Is this possible? Thanks  

I recently created a Runbook Automation/Action whose job it is to set newly discovered components to a different Organization. It triggers off the “Component Device Discovered” Event Policy.I ran into a handful of the following errors when a group of Aruba APs was added to Central around the same time:Snippet (723) failed to execute with exception: Failed to acquire lock /tmp/envmanlock-83EF68E00F35226911E02C49561FADFA within 60 secondsResult:NoneThis particular Aruba environment is known for how big it is, so there could be some issue with volume of devices getting discovered at the same time, but is anyone familiar with the error and why it could be happening?

It has been observed that SNMP credentials (such as community strings, SNMPv3 authentication/privacy keys, and SSH credentials) are retrievable in a readable format through authenticated API access.This behavior represents a significant security vulnerability, as sensitive credentials should never be exposed in plaintext. If the exposed credentials have Read-Write privileges, an attacker who gains API access could potentially modify device configurations, disrupt services, or compromise the integrity of managed systems.As a security best practice, all sensitive credentials should be encrypted at rest and should not be retrievable in a user-readable format through any API response. Where credential validation is required, mechanisms such as secure storage, tokenization, hashing (where applicable), or masked values should be implemented instead of returning the actual credentials.We recommend remediating this issue by ensuring that sensitive credentials are securely encrypted and inacces

How to submit an idea to the Nexus Community Ideas Hub — and why you should search, review, and vote first We love hearing new product and community ideas. To keep the Ideas Hub effective and actionable, please search existing ideas and review/vote on them before creating a new submission. This helps prevent duplicates, concentrates community support behind the best suggestions, and speeds routing to product teams.Quick overviewStep 1 — Search for similar ideas Step 2 — Read details and add your vote or comment Step 3 — Submit a new idea only if no good match exists Step 4 — Follow up and engage with feedbackStep 1 — Search first (how to find existing ideas)Open the Nexus Community and go to the Ideas Hub. Use the search box at the top — try multiple keywords (feature names, pain points, product areas). Use quotes for exact phrases and try synonyms. Apply filters: Status (New, Under Review, Planned), Category, and Most Voted to narrow results. Scan both highly-voted posts and recent su

We're proud to share that the ScienceLogic AI Platform has been named a TrustRadius Top Rated product for the seventh consecutive year, recognized across eight categories that define modern IT operations. But this recognition isn't really ours. It's yours. The TrustRadius Top Rated award isn't bought or nominated. It's earned entirely through verified customer reviews. Your honest words, describing the real outcomes you achieve every day. Seven years running isn't luck. It's you, choosing again and again to share your experience because the platform keeps delivering value for your team. Recognized across 8 categories:  AIOps  Observability  Event Monitoring  System Monitoring  Network Monitoring  IT Infrastructure Monitoring  IT Operations Analytics  Application Performance Management (APM)                  These are the areas where you tell us you see the most impact and the heart of how you run complex, mission-critical operations with confidence.  To every customer who has tr

Part 2- Monitoring, Remediation & PowerPacks  1. What to MonitorBeyond the per-cluster event policy above, a couple of additions make this a standing, fleet-wide view:Keep the event policy enabled so newly discovered or downgraded clusters surface automatically, not just at audit time. Treat the collected version as the base release: it does not reflect COP patch state. Where a COP may be the actual fix, mark the result indeterminate rather than "safe." Optionally, you can create a custom report or device table keyed on the CUCM Version object and the WebDialer Service Status object, grouped by organization, for a point-in-time exposure rollup across all monitored clusters.2. RemediationCisco's remediation instructions, including the fixed releases, patch files, and upgrade paths, are available here:CVE-2026-20045 (RCE): Cisco Security Advisory cisco-sa-voice-rce-mORhqY4b CVE-2026-20230 (SSRF): Cisco Security Advisory cisco-sa-cucm-ssrf-cXPnHcWNote that the ScienceLogic AI Platform

Step 3 — Create the event policyThe event policy simply matches the alert you just created — the ScienceLogic AI Platform pre-fills most of it for you.On the same [Alerts] tab, click the event icon next to your alert. The Event Policy Editor opens with Event Source already set to Dynamic and the Link-Alert field pre-populated to your alert — leave both as-is. Set Operational State to Enabled. Set Event Severity — Critical for the actively-exploited RCE match; Major or Minor for the SSRF-plus-WebDialer match, per your policy. In the Event Message field, enter %M to carry forward the alert's log message (which already contains the version via %V). No other matching is needed — the event fires whenever the linked alert fires. Optionally add a Policy Description for whoever triages the event, e.g.: "This event indicates the CUCM cluster is running a software release on a line affected by CVE-2026-20045 (RCE, actively exploited, CISA KEV) and/or CVE-2026-20230 (WebDialer SSRF). The collecte

 Step 1 — Confirm the data is being collectedOpen a discovered CUCM cluster → Device Investigator → Collections. Open "Cisco: CUCM Cluster Information" and confirm CUCM Version shows a real release value. Open "Cisco: CUCM Cisco Services Configuration" and confirm the WebDialer Service Status is present.What the version string looks like. The CUCM Version object returns the full software build in the form Major.Minor.Release.Build — for example 11.5.1.15900-18 or 15.0.1.12900-x. Note this is the application release and is distinct from the OS Version object, which reports the underlying appliance OS kernel (e.g. 2.6.32-573.18.1.el6.x86_64). Match against CUCM Version, not OS Version. The collected string identifies the release train; it does not contain the advisory's "SU" label, so the detection below flags affected trains and prompts you to verify the exact SU level (see the note in Step 2). Step 2 — Add a custom alert to the Dynamic ApplicationAn alert is a formula SL1 evaluates eac

Two recent Cisco Unified Communications Manager advisories — one an actively-exploited zero-day — can be scoped today using data the CUCM PowerPack already collects. 1. SummaryCisco has disclosed two vulnerabilities affecting Unified Communications Manager. If you monitor CUCM with ScienceLogic AI Platform, you already hold the two data points needed to scope exposure: each cluster's running software release, and which services (including WebDialer) are active.CVE Type Severity Status CVE-2026-20045 Remote code execution via the web management interface, no authentication required CVSS 8.2 Critical (SIR) CISA KEV Actively exploited in the wild CVE-2026-20230 Server-side request forgery (SSRF) that can escalate to root CVSS 8.6 Critical (SIR) PoC code available; no confirmed in-the-wild use. Conditional — see note.  Why "Critical" with a sub-9 score? Cisco assigns both a Security Impact Rating of Critical — higher than the numeric CVSS suggests — because successful

Hello, We are pleased to announce a hotfix release for Skylar Compliance on June 8, 2026. This hotfix includes the following update: Addressed an issue that caused dashboard report emails in the classic user interface to be sent every minute instead of following the previously configured schedule. Scheduled reports in the classic user interface will now follow specified time intervals as expected. (Cases: 00671469, 00672226, 00672572) Thank you, Release Management

We are pleased to announce the release of Skylar Automation v3.4.0. This release represents a major milestone in the Skylar Automation platform. The platform now includes a built-in MCP server, which enables AI agents to query and act on a customer's ScienceLogic environment. Key capabilities include operational visibility, compliance checks, configuration management, and workflow automation - all accessible to any MCP-compatible AI agent.Several supporting SyncPacks are being released at the same time (links included) Skylar Automation 3.4 & Skyautoctl v2.11.0 System Utils v1.4.0 SyncPack Base Steps v1.7.0 SyncPack Skylar Compliance v3.1.0 SyncPack Skylar One v0.1.0 SyncPack (beta) For more information, please see the following linked documentation: Documentation: -  Getting Started Guide -  Release Notes Thank you, Release Management

A set of Knowledgebase Articles published last week is listed below. All KBAs can be searched via Global Search on the Support Portal and filtered by various components like product release. KBA Title  Portal Link and KBA Number Product Line Node Reboot Alert Not Triggered for Specific Device KB21028 Skylar One  

In this video, see how Skylar Advisor helps quantify the revenue impact of service disruptions by connecting performance issues directly to business outcomes.When critical services like checkout fail, Skylar Advisor provides immediate insight into what that means for revenue, customer experience, and long-term growth.Explore how Skylar Advisor enables:• Real time visibility into application performance issues• Revenue impact analysis based on actual business data• Insight into peak and off peak financial risk• Understanding of customer behavior impacts like cart abandonment• Evaluation of long term effects on retention and brand trust With Skylar Advisor, teams can move beyond identifying issues to understanding their true business impact, helping prioritize response and drive smarter decisions. Learn more about the ScienceLogic AI Platform: https://bit.ly/4a4gIaD 

Hi All,  As of now all the filesystem for SL1 data collector and message collector type is showing as other where monitoring of FS is disabled at default. The Appliance must be customized to make  valid type so that this will not be hidden at default. 

Documentation updates to the Skylar AI documentation site for 6/5/26:Added release notes for Skylar AI version 2.3.1 Created a new Skylar AI Installation Guide that contains all of the existing installation, with updates and new information for customers.Documentation updates to the Skylar Compliance documentation site for 6/5/26:Updated the release notes for the 20260603 Maintenance ReleaseDocumentation updates to the PowerPacks documentation site for 6/5/26:Added release notes and manual updates for IBM: AIX Monitoring v104, which adds the ability to alert you when the password expiration for the credential used to monitor AIX is imminent. Added release notes and manual updates for Microsoft: Windows Server v120, which addresses several issues from previous releases.

Hello, We are pleased to announce the release of the ServiceNow Base Pack PowerPack v110. This release includes the following feature:Added the disable_tls variable to the Input Parameters field for the "ServiceNow: Create, Update, Clear Incident or Event" and "ServiceNow: Send to PowerFlow" run book action types. The "disable_ tls" variable has a default value of "False". When the variable is set to "True", TLS verification is disabled. Thank you,Release Management

 Welcome — Introduce Yourself to the Nexus Community We’re excited you’re here! This thread is a friendly space for Nexus Community members to introduce themselves, connect with peers, and share a fun fact to break the ice. Whether you’re new to the product, a longtime user, an SME, or part of the product team, we’d love to learn a bit about you.What to post (suggested format)Name / Role: e.g., Jane Doe — Site Reliability Engineer Company / Team: optional How you use Nexus: short summary — monitoring, incident response, dashboards, automation, etc. Something fun: a hobby, favorite snack, a weird skill, or a memorable travel story — keep it light! One thing you’d like to learn from the community: topic, tip, or resource requestExample introductions (copy and modify)Hi everyone — I’m Alex (SRE). I use Nexus to correlate performance signals across our multi-region services. Fun fact: I’ve completed three half-marathons. Happy to share dashboards and alert tuning tips!Hey all — I’m Priya,

Hi ,  Whether SL1 does has the Intelligence  to detect the parent and child relationship based on CDP and LLDP information . If it works means can you let us know how device is picked as parent and child. 

Hello, We are pleased to announce the release of Skylar Compliance 5.6 20260603 to appliances. This release addresses the following issues:Addressed an issue that prevented users from restoring from devices that had been successfully backed up. (Case: 00649282) Addressed an issue that caused a "Blank value passed" error when pushing firmware to a device. (Case: 00663478) Incorrect data will no longer be synced to the secondary node in a High Availability cluster due to an issue with the live-sync replication process. (Case: 00668482) You can now open and view report schedules in the classic user interface in read-only mode. (Case: 00665164)Thank you, Release Management

If you run across something at docs.sciencelogic.com that didn’t quite look right, or if you have a question about some content, or even if you find a typo, this is the place to let us know! Please reply to this entry in the Reply section, below. TIP: You can also make comments right at the doc site by clicking the blue Feedback button at the bottom right of every page at the docs site. Thanks for helping us improve our docs!

We are pleased to announce that the Microsoft: Windows Server v120 PowerPack has been released on 6/2/26. The download for this release can be found on the Support Portal under the PowerPack filename:https://support.sciencelogic.com/s/release-version/aBu0z000000XZTGCA4/microsoft-windows-server Enhancements and Issues AddressedThe following enhancements and addressed issues are included in this release:Addressed a snippet argument issue that caused the "Microsoft: Windows Server IC Process Service Cache" Dynamic Application to generate too much data. (Case: 00668041) Addressed an issue that prevented the "Microsoft: Windows Server BIOS Configuration" and "Microsoft: Windows Server Memory Configuration" Dynamic Applications from functioning correctly. Please refer to the Microsoft: Windows Server v120 PowerPack File Details in the PowerPacks section of the Support Portal for all information pertaining to the PowerPack Support Status, Minimum SL1 Version, Solution Information, and Pricing

Hi All,  We have most of devices enabled with CDP and LLDP , if we see the view in the map the both the devices are connected to each other in view which is not helpful . Device A is parent and device B is child , But in maps both the device is showing as parent as well child. Whether everyone has this issue ?  

We are pleased to announce that the IBM: AIX Monitoring v104 PowerPack has been released on 5/31/26. The download for this release can be found on the Support Portal under the PowerPack filename:https://support.sciencelogic.com/s/release-version/aBu4z000000wk79CAA/ibm-aix-monitoring Enhancements and Issues AddressedThe following enhancements and addressed issues are included in this release:Made the following updates to alert you when the password expiration date for the credential used to monitor AIX is imminent: Added a new "IBM: AIX Password Expiration" Dynamic Application, which collects and reports: The user's name The date on which the user's password was last updated The maximum number of days the password can be used before it expires The maximum expiry period for the password The number of days remaining until the password expires The password's current status NOTE: This Dynamic Application is disabled by default. To use it, you must first enable it. To do so, go

Documentation updates to the PowerPacks documentation site for 05/29/2026:Added release notes and updated the manual for version 101 of the MongoDB PowerPack, which adds support for v7 and v8 instances of MongoDB, updates the PowerPack to support Python 3.11, and addresses an issue that caused the "MongoDB: Server Discovery" Dynamic Application to fail and register an error. Added release notes and updated the manual for version 119 of the Microsoft: Windows Server PowerPack, which adds a number of new Dynamic Applications, updates multiple existing Dynamic Applications, and addresses multiple issues. Added release notes and updated the manual for version 112 of the Cisco: UC VOS PowerPack, which includes updates to the Python 3.11 execution environment, and addresses multiple snippet issues.Documentation updates to the Skylar AI documentation site for 05/29/2026:Added release notes and an updated manual for the Skylar AI 2.3.0 release. Added the archived documentation set for Skylar A