Azure subscription monitoring max retries error
Hi all, We are in the process of setting up SL1 to monitor a mix of Azure and on-prem VMWare devices. The Azure subscription monitors repeatedly error with: "Azure: Network Failure on App: ARMVMPerformance, Message: HTTPSConnectionPool(host='management.azure.com', port=443): Max retries exceeded with url: Failed to establish a new connection: [Errno -2] Name or service not known',)),". We have 14 subscriptions setup and some don't show the error at all, some show it weekly and 1 shows it every 15 minutes generating 1000's of critical alerts a month. SL1 support/PS say it is down to a DNS issue: We have checked with the ENG Team and it looks like a random DNS issue where it can't resolve "management.azure.com" from the collector and it looks transient. The error message points to a failure to resolve the hostname when the config da’s are run. However we use the same DNS server for all collectors and some subscriptions don't see the error. I can also do successful nslookups/pings/nmaps from the collectors. Has anyone seen something like this before? Thanks, Markhodgm4 hours agoContributor33Views4likes3CommentsAssistance required on MAPS of SL AP2 User Interface for Network Views
Situation: A map is created and includes network devices which automatically displays layer 2 and layer 3 (including CDP and LLDP) relationships when they are available. The user has the configuration option to filter these out. The layer 4 transport protocol is not displayed. See OC7 model below. Desired outcome: The user is able to switch between layer 3 and layer 4 protocols.Uday1732 days agoContributor16Views1like1CommentCreating a new ticket status.
Hi is there a way to create new ticket status just like we would do with other fields using Select Objects Editor feature? We currently have below options that came with the system, and i would like to add more. Is there a way to do that? Status. Status of the ticket. The choices are: Open. Ticket has been created. Pending. Ticket has been acknowledged. Working. Someone is working on the ticket. Resolved. Issue has been resolved. Regards, TumeloSolvedtumelo079 days agoContributor42Views1like3CommentsGraphQL query problem
I'm trying to use GQL to extract detail about our event policies, as the API give very little detail. And as we have a SL hosted system, DB access is only available to us via the Web UI. I've been building the query up, but I'm getting lost on the eventPolicySuppressions. Here's the code: query Event_Policies { eventPolicy(id:4075) { id name editedBy {id user} dateEdited severity { id name } enabled source {name} regularExpression1 regularExpression2 regularExpressionSearch autoClearedEvents { id name editedBy {user} } eventPolicySuppressions { entity {__typename}} } } I only seem to be able to get the entity {_typename} (which is "device") or the entityType ("entityType": "device") as a result. There don't appear to be any other options being offered from the UI suggestions. Does anyone know how I can get the eventPolicySuppressions device or device groups information? Thanks, RichardSolvedyaquaholic13 days agoContributor II47Views1like3CommentsWhich Dynamic App is more efficient for Linux File System exceeds a threshold
Which Dynamic Application is more efficient for File System Utilization SL1 can trigger two different type of events for when a File System exceeds a threshold: File System exceeded events are generated via an Internal DA by SL1 and is executed every 5 minutes Host Resource Storage Utilization events are generated via a Discovered DA from the SNMP agent on the host and can be collected at 5, 10, or 15-minute interval I am trying to determine which one make more sense to use on linux servers and is not as taxing the data collectors.SolvedShawnRobertsGD13 days agoContributor II26Views0likes1CommentDevice Failed Availability Check: Unknown
We're having problems with a few windows servers where after a day or two, the server no longer communicates with SL1 and reports the Major event "Device Failed Availability Check: Unknown". When checking the server, we see that the SiloAgent service is no longer running. Startup Type is set to Automatic. Restarting the service fails. We have tried reinstalling the agent only to find that after a day or two, the service fails to run. Anyone else experience this or have any suggestions on what we might do to resolve this?SolvedBonJecker14 days agoParticipant14Views1like1CommentIssues with Collectors at 12.1.2 OL8 & Powershell?
Last week we upgraded our Lab Env to 12.1.2 and the DB's to OL8. Tried the in-place collector upgrade to OL8 and only one of the two collectors upgraded. The other is still at OL7. Each collector is in it's own collector group. We have Windows devices 3 of them at ver 2019, 2016, & 2012 using AD credentials and port 5986. Concurrent Powershell is enabled. The servers were on the OL7 collector and data collection was working just fine. I moved the Windows devices to the Collector running OL8 and data collection stopped working. If I disabled Concurrent Powershell for that OL8 collector, data started collecting again. So far I have not found anything in the logs. Linux and MSSql are working fine with out issue (so far). Has anyone else seen this with Windows since upgrading DB's and Collectors to 12.1.2 OL8SolvedThomas14 days agoContributor II29Views1like2CommentsBulk discovery of decentralized Servers
We are looking for a solution to a way where we can bulk discover servers which are not centralized/managed by Active Directory. In our environment where AIX/Linux is decentralized and not managed by Active Directory. Currently, as per understanding this is a one by one onboarding of such devices. Condition: Server SL1 user id password to be managed by CyberARK. Cons: Too many individual credential for each discovery.Solvedschatte114 days agoContributor II39Views1like2CommentsIs anyone else running SL1 v12.1.2?
We were supposed to be upgraded to v12.2 but problems with Aurora (the AWS database offering) we have ben placed onto v12.1.2. We were handed the system on September the 9th, and the release notes are dated the 10th. It has zero backward compatibility with collectors (all must be on 12.1.2) and we've been plagued with critical system alerts before we even attached a collector. I kind of get the feeling that we're alpha testing this release.... ☹️ Can anyone else, give me some comfort and confirm that we are not the Guinea Pigs for this release?yaquaholic15 days agoContributor II136Views1like6CommentsSL1 Themes after upgrading to v12.2.1.2
Upgraded to SL1 v12.2.1.2 last night and had some bumps but for most part my organization is doing okay. Seen several positive changes in the UI like a much improved Events page however I'm having problems with my themes. I have both a lab and a production systems. To keep myself from accidentally doing stuff in production when I think I'm in the lab, in the past I put a dark theme on production and a light theme on my lab. Since the upgrade I'm seeing light theme pages in certain pages, despite the fact that the dark theme is applied (and reapplied for good measure). Is this a known issue? Anyone else seeing this behavior?Solved27Views1like2CommentsSuppress a syslog event on a specific interface
How might one go about suppressing a syslog event for a specific interface, but still receive all other events for that device and interface? For example, you have a syslog event message like: 5238379<187>267450: LC/0/1/CPU0:Aug 20 17:38:21.939 EDT: ifmgr[214]: %PKT_INFRA-LINK-3-UPDOWN : Interface TenGigE0/1/1/7, changed state to Down Your existing event policy uses regex match logic as follows: First Regular Expression: PKT_INFRA-LINK-[35]+-[^\s]+ Second Regular Expression: to.*(DOWN|Down|down) Identifier Pattern: Interface\s+([^ ,]+) Identifier Format: Interface: %1 Would you modify the event policy in some way? Is there other levers/knobs to in the system to tinker with that might get you the desired result?SolvedPattyN21 days agoContributor II69Views1like4CommentsFind last login time for user accounts using API
Hi - Where would a person find the last login time for accounts that login with the API? I have checked Access Sessions and the report Inactive User and the API sessions do not get logged. I am not able to load Audit Logs without a timeout to see if the API sessions would be available there. ThanksSolvedmiles_cross21 days agoParticipant41Views0likes3CommentsCPU utilisation data in bulk from API
How can I get server device CPU or Memory utilisation data from the API in bulk. I can get this from individual servers by specifying the device_id (i.e. /api/device/<device_id>/performance_data/838/data?duration=24h) but there must be a faster and less system taxing way? The documentation specifies how to get performance data in bulk (Requesting Performance Data from the API in Bulk (sciencelogic.com)), but not for all servers where class_type=linux as an example.SolvedMartinO23 days agoContributor48Views1like4CommentsOverlapping IP addresses
This might be an oldie... How should we manage devices which have multiple overlapping IP addresses. For example Layer3 switches or router HA pairs can have same IP addresses set up to two or multiple devices for routing high availability or management reasons. This then makes SL1 see same IP addresses in multiple devices. And that then generates events into System organization, events like: A Message Collector is managing multiple devices with an overlapping secondary IP address: Secondary IP address overlap on devices managed by Message Collector: 101 | Collector Groups: 44 | IP Address: 128.0.0.127 | Device IDs: 70999, 70998, 71001, 71009, 71005, 71003, 71006, 71004, 71007, 71002, 71013, 71012, 71015, 71010, 71014, 71008, 71016 Ok, that IP address can be deleted from database, but the nightly discovery again brings up the same issue next day. And because those are network devices where every now and then are some changes done in interfaces I believe we just have to have the Auto-Update enabled for those devices. So: is there a way to tell that please do not discover all IP addresses for this device is there a way to make SL1 accept that, some other way than creating pretty interesting regexes into event policies event policy is for system level so that not easily be just suppressed for some devices are there some other ideas how to manage this situationSolved45Views2likes2CommentsHow do I format detailed Email Message from an Alert Formula
Hello ALL I have the following formula for an unhealthy alert object: result('o_31218', label="DataGuard is o_31218 logs behind in following Env: PrimaryDB:o_31214 SecondaryDB: o_31215 LastLogRec: o_31217 Difference: o_31218 ") >= 0 How can I get the Subject to contain object o_31214 and the body of the email to display what is listed in the above Policy Formula with the objects replaced with actual values ?Solvedmarcmiller26 days agoParticipant16Views1like2CommentsSystem threshold information through API
We trying to pull the details of thresholds configured for individual devices through API, The system threshold API has the information of latency, availability and data retention related information's, whereas the required details like CPU, Memory and disk space related details are not coming up, is there any way to pull these information through API? /api/device/3/device_thresholds 3 is one of our device ID. Thanks GauthamSolvedamgautham31 days agoParticipant35Views0likes4CommentsNeed a help on Low ode Information
Hi Everyone I am currently trying to gather information about low-code in ScienceLogic, including how it works, what updates and changes have been made, how it can be implemented, and how we can effectively use it. If anyone can provide related documents or resources, it would be very helpful for meUday1732 months agoContributor36Views0likes1CommentRelease notes for Agents
The versions of the agents are more or less independent from the SL1 releases. This is giving the flexibility to release and install agents in faster cycle. By making it a independent software component the need for release information becomes crucial. The information in the SL1 release notes does not comply anymore. Is it possible to post the Release Note for agents on a site? It should contain the normal topics, versions, fixed issues, new features, known issues, dependencies etc. Thanks in advance.SolvedAlfred_Heijkoop2 months agoContributor III57Views3likes3CommentsGQL queries with attributes
We have a need to automate lots of BSM service creations and I am struggling with GQL now. We have created attribute to be used for har query {customAttributes (first: 7, search: {name: {eq: "BSM_Region"}}) { edges { node {id label type entity alignmentType } } } } and that gives us: { "data": { "customAttributes": { "edges": [ { "node": { "id": "57", "label": "BSM_Region", "type": "string", "entity": "harProvider", "alignmentType": "extended" } } ] } } } If I then try to align that attribute to spesific service like this: mutation {alignCustomAttribute( attribute:57, entity: "cm03r2q3a807hs5mn8m4a1dga", value:"Koillismaan kauppa", type: harProvider ) {__typename} } It gives an error: { "errors": [ { "path": [ "alignCustomAttribute" ], "message": "The following id/ids: 57 could not be found. Failed to align custom attributes.", "extensions": { "code": "ID_NOT_FOUND" } } ], "data": { "alignCustomAttribute": null } } Some help needed here.Solved45Views0likes4CommentsDynamic Applications - SNMP Performance
Hello fellow members. I humbly come to ask for help about a problem we are facing in our EM7 system. We've created some SNMP Performance Dynamic Applications that the OIDs return OctetString values, such as "20 mbar". Then, how could we treat this data in order to plot it in Device Performance? We are avoiding to create a python snippet, cause this system have an old python version installed and most compatible SNMP libraries are not available anymore. EM7 Version: EM7 G3 - 8.7.1 - Build 211 Bellow finds some pictures to help understand this issue: Device Performance without any data because it cannot read OctetString. Collection Objects. Each object returns a differente type of value, i.e. Cycle Time returns a integer and Output Pressure returns a OctetString. MIB Browser Result. Anybody could assist us? Thanks in advance.SolvedStefanoRezende2 months agoParticipant47Views0likes2CommentsHow Do I Set The Parent Device Of A Device?
Hello, I hope someone can assist with the following. I am using Device Component Mapping to create a hierarchical/tree structure of devices, but SL seems to assign the Parent Device attribute randomly for each device created, and I need to be able to set the Parent Device correctly, so that the hierarchical structure is correct. I have data that contain a set of locations that correspond to the tree structure. The structure has this concept: One Country -> Many Cities -> Many Buildings -> Many Rooms. Each data record has an id, a name, a parent id and a type. The data is split into cities, buildings and rooms. For example, a city record might be as follows: id: CITYPARIS, name: Paris, parent id: CTRYFRANCE, type: city. A building record might be as follows: id: BLDGMONTPARNASSE, name: Tour Montparnasse, parent id: CITYPARIS, type: building. And to complete the picture, a room record might be as follows: id: ROOMMEETING1, name: Meeting Room 1, parent id: BLDGMONTPARNASSE, type: room. When I create one of the 'tree' levels of devices (it could be city, or building, or room), in my Dynamic Application, the code snippet extracts cached data where the type is 'city', then passes the extracted data to the result handler, which populates the four collection fields: id, name, parent_id, type. The id field is set to be the Unique Identifier, the name field is set to be the Device Name, and the type field is set to be Class Identifier 1 (I've created device classes for each tree level, allows me to have funky icons to distinguish the devices visually). The DA then creates devices for each record found, and I see them appearing on the Device Manager screen. However, when I examine each device, the Parent Device that is set seems to be random. For example, three city devices created (Paris, Nantes, Poitiers) all were assigned a Parent Device of 'Paris', the name of one of the devices created, instead of using their own parent_id values. Is there a way to tell SL what the Parent Device for each device record should be, perhaps in the snippet or somewhere else? Can I use one of the field values extracted from the cached data (ideally, my parent_id) as the value for the Parent Device field? This is my first post here, so apologies if this is in the wrong place!SolvedTADAndyMarshall2 months agoContributor II146Views1like14CommentsRestrict Interface Internal collection
Hi All, We need to disable interface internal collection for certain devices. Whether it is possible to do via any device group or device class or model? Basically we don't want the interface utilization data to be polled for all devices.SolvedIssac2 months agoContributor III28Views1like4CommentsLibrary with recent Paramiko support?
Is anyone aware of a PowerPack containing an Environment/Library with newer Paramiko support, compatible with SL1 11.2? We have run into devices that don't allow older Paramiko cipher support in the default environment. Thank you!SolvedMikeOsborne2 months agoContributor22Views1like1CommentHow to Fix powershell communication error?
How to Fix powershell communication error Forward and reverse name resolution is not properly configured for server? We have multiple windows server in which we are facing this issue and server have multiple DNS entries and we can delete them. also i tried to add IP and host in sciencelogic data collector also added in dnsmsaq-resolve.conf to resolve this issue but still we are facing this error Forward and reverse name resolution is not properly configured for server, how to fix this issue without deleting DNS entries.piyushkumar212 months agoParticipant77Views0likes4CommentsHow can I check who is logged into SL1
Is there a way to check who is logged into SL1 at any time?SolvedMaTu3 months agoContributor137Views0likes7CommentsScienceLogic Products Unaffected by Recent CrowdStrike Issue
Regarding the recent CrowdStrike Falcon XDR/EPP incident: A content patch caused Windows-based systems to crash. CrowdStrike has identified and addressed the issue. ScienceLogic products are unaffected. Our Linux-based appliances are not impacted by this Windows-specific issue. Your ScienceLogic products continue to operate normally. For questions, please contact your Customer Engagement Manager or our Support Team.SolvedSaraLeslieAdmin3 months agoCommunity Manager59Views4likes1CommentElevated Privileges for Python3 Libraries
We are stuck trying to recreate some of the metrics we collect in our current Python2 snippets using pipes. The specific example is 'ping', which required subprocesses, no longer allowed. We don't believe latency_ping,avail_ping from silo_tools will let us collect packet_count, packet_loss, avg_latencies, latencies that a library like ping3 allows. (used to calculate jitter and else) Some of the libraries seem to require raw sockets and/or elevated privileges. So our question is two fold. 1 - Can we import custom libraries such as Ping3? 2 - How do we use elevated privileges on the collectors, as some libraries require elevated priveleges? Thanks in advance, DanSolvedDanBuck3 months agoContributor239Views4likes12CommentsSL1 Okta SAML Integration
Hey Everyone, I have recently integrated my SL1 distributed system with Okta. When accessing my databases directly by their IP everything functions as intended. Where the trouble begins is when trying to access my Admin Portals. When trying to access the Admin Portals we get a message back of "File not found". We have created sperate Okta applications and added them to the database hoping to resolve the issue but it still persist. Has anyone done this integration before and have they run into similar issues?MitchellTK3 months agoParticipant35Views0likes3CommentsIPv6 only monitoring issues
Hi, Has anyone developed a custom monitoring solution for IPv6 only devices? I am looking for PowerShell, Linux Powerpacks and a credential tester. Currently the SL1 solution does not support this scenario for Windows Servers. I believe the same issue exists for Linux devices using the host resource power pack, but I do not have a ipv6 only Linux server to test this scenario. Both situations should fail to provide a port list as it requires Nmap -6 which is not supported in the solution. I am not sure if the issue would fail on web checks, ssl certs, and other components in the system. Any help or experiences you have would be helpful as we navigate this issue.MarkC3 months agoContributor II34Views1like1CommentHaving trouble re-packaging SL1 Library
Hi All, hoping someone here can help me out. I recently have been trying to make a small tweak to the python code for the out of the box silo_cisco_meraki_api Library from the Cisco: Meraki Powerpack (literally just changing one variable) I was able to get the Library downloaded, unpacked, extracted the individual .py file using 'wheel unpack [file]', made the change, and ran 'wheel pack [directory]'. The final step as outlined in this SL document is to re-package the python project using the command 'python3 -m pip download --find-links=. silo_cisco_meraki_api==0.6.10'. However, when I run this I'm getting the error: Does anyone know what I'm doing wrong here? I'm guessing there's a very obvious step I'm missing.SolvedJeff_Kinny3 months agoContributor49Views1like3CommentsUpgrade SL1 user interface - AP2 Espresso does not support Aurora3 in AWS environment (SaaS)
Hello, We would like to upgrade SL1 user interface AP2 to latest "Espresso" 8.7.37-107 version for our ScienceLogic SL1 environment in SaaS environments. However the release note: https://support.sciencelogic.com/s/release-file/aBtVL0000000C1B0AU/espresso explicitly mentions: NOTE: The AP2 Espresso RPM file does not support Aurora3 in an AWS environment. We do not see this constraint in earlier versions of "Doughnut" 8.6.30-103 and "Croissant" 8.5.7-56. Does anyone have info on support for newer AP2 in AWS environment for SaaS and what the way forward is?Solveddvanamerongen3 months agoContributor89Views2likes1CommentUnused Powerpacks in Environment
Hi All, I would like to know how customers are managing the unused powerpacks in their environments , because the recommendation is to delete the unused powerpacks because it will create some load during nightly discovery process . In case if we delete those packs also after upgrade it re-appears into stacks. There is any plans to avoid this?SolvedIssac3 months agoContributor III93Views0likes2CommentsExpansion of groups
Would like to see ScienceLogic consider the expansion of groups beyond (Device Groups) to include: Site Groups - a distinct site or location which may contain many devices matching a dynamic expression, a location-based attribute (for example lat/long), a portion of the device name, or also include static members. For example, all devices with an attribute or name match of site ID = 1382 are part of site Pekin, Illinois, US. Interface Groups - group of interfaces, for example, all interfaces matching a parent device name portion of name or description, or other set of conditions / expressions. For example, all interfaces with "wan" in the name should be in the WAN Interfaces Group. Collection / DA Groups - group of collections across various devices by expression/condition. For example, all IP SLA tests with "TEAMS" in the test tag name.SolvedMikeOsborne3 months agoContributor45Views0likes4CommentsPPK MS Cluster support for DAG IP-Less
Microsoft has the option of building a Database Availability Group without an IP, called IP-Less DAG It uses a broadcast IP, default 255.255.255.255 Is there a way the MS Cluster PPPK can monitor this type of DAG?Solvedjamesramsden3 months agoContributor III41Views0likes3CommentsGroup rules for Interface
Hi All, There is any plans from to implement the grouping for interfaces .i:e I need to group the interface where the alias name contains or starts with MSP . Basically this will help for reporting , dashboarding and applying template only to specific set of interfaces.SolvedIssac3 months agoContributor III42Views2likes2CommentsOrchestration Tasks in Sl1
Hi All, I would like do some orchestration task from Sl1. Eg: I have a webserver A where if the File system reaches above 95% we used to get an alert from SL . With the help of RBA i need to trigger a task saying that if the alert is trigger from websever A , just shutdown the server Apache. There is any OOB method to do this ? Or we need to write the script to trigger ?SolvedIssac4 months agoContributor III91Views0likes4CommentsWho will be our next SL1 Innovators?
Hello Nexus Members, Looking to showcase your creativity, innovation, and inspiration? Look no further. In case you're opted out of email, we just launched our SL Innovators Awards!! Our ScienceLogic Innovators Awards were established to recognize and learn from those nerdy by nature, tech buffs, and visionaries using SL1 in pioneering ways to power a better way to work. Show the Nexus Community something cool and innovative you've been working on to achieve real business outcomes. We want to hear your ideas! Submit your applicationby September 12.17Views0likes0CommentsCisco Cat9500FixedSwitchStack Alerts
Cisco: Power Supply problem. Currently, Power Supply (TenGigabitEthernet */*/* Supply Voltage Sensor) status: unavailable Alerts from Cat9500FixedSwitchStack This is something not an usual alert for cisco devices. I am receiving this alert on Cat9500FixedSwitchStack (Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.4). Has any one receiving the same alerts and what's the fix applied.SolvedSamuel4 months agoParticipant49Views0likes6Commentssilo_apps Library for Python 3
Starting the process over converting our Python2 PowerPacks to Python3. I created a Python3 Execution Environment, but there was not a ScienceLogic Silo library for python3 to add. Does this need to be download from SL and imported? Or do I use Py2 Library? Without this library in my Dynamic Application it wont be able to interact with SL1.SolvedJMast3rs4 months agoContributor75Views1like2CommentsExtended Architecture
Hi All, I would like to know about the extended architecture in detail , the agent is connected to streamer . How the streamer works on High availability on over the K8 ? Can we have two streamer url if one is not working the agents communicates with other during planned maintenance or outages ?Issac4 months agoContributor III73Views0likes3CommentsCustom Reportwith SL template
Can we have option to pull the monthly report forMinimum, Maximum and Average usage for CPU and Memory . I have tried and pull the same by using template “Device Top Metrics” Request you to please check and help .Premrajure145 months agoParticipant58Views1like3CommentsCisco Unified Communications Manager 14 EOL and 15 Upgrade tips slides from Cisco Live
Hello all! I'm sure some of you are at Cisco Live NAM right now, but if you aren't, there was a great presentation on CUCM. CentOS is being swapped out, CUCM 15 appears to be switching to Python 3, along with other security changes. They've announced an EOL date for CUCM 14 as well. Take a look at the slide deck as it's very interesting. Their product team also informed me that the API is unchanged from v12.5 through CUCM 15, so our integration should continue to work. Please let us know if you have any issues with the latest version of our PowerPack and CUCM 15.654Views2likes0CommentsEvent for Windows System Uptime
Hi - I would like the use the system uptime to create an event for a Windows server reboot. The Windows Server PowerPack seems to collects this value but can't find an event that uses system uptime. Is it possible to create an event if the server has not been up for a time period like 15 minutes. Thank youmiles_cross5 months agoParticipant56Views0likes1Comment