ScienceLogic AI Platform

I recently had a request from a user asking if there was a way to quickly look at the device logs for multiple devices all at once.  I looked at the reporting tool for a bit and didn’t find anything there, then went to see if I could provide that in an AP2 dashboard.  I know device logs in a widget are technically possible because they’re right there on the default device investigator tab but I cannot for the life of me figure out how to get that data displayed in a dashboard.  Events no problem.  Device logs not so much.  Any suggestions or ideas on how to make this happen?  Thanks.

I'm looking for information on internal tie-breaking logic when multiple event policies match the same event and have the same weight.  From what I have read, this logic is typically based on policy ID or creation order - but which way ?   oldest wins OR newest wins ?My team have a set up meant to handle VMware events (API) differently based on the Organization.  However they are doing this using device groups in the suppression tab which isn't effective if the event match is the same. 

Good morning ScienceLogic Community, with the rapid adoption of Artificial Intelligence I am seeing a lot of GPU's being deployed and since these GPU's are not cheap there are lots of people asking if they can be monitored. Anyone monitoring GPU's already?Thanks. Jason. 

OK.  So I'm fairly new to modifying events in SL1, but our NOC has requested that we research suppressing the "Poller: Interface operationally down" event if "Poller: Interface Admin down" is active on a given interface.  That makes perfect sense to me.  If an interface is admin down, then there is absolutely no need for the operationally down event/alert.  Other tools I have administered in the past had this logic baked in out of the box, but that doesn't seem to be the case with SL1.  I looked at using the Autoclear option for the Admin down event to have it clear the operationally down message, but I'd much rather just not have the operationally down event trigger at all if the interface is admin down.Any thoughts on how to get this configured?  Thank you.

I'm working on building out a dashboard for IPSLA tests.  I'd like one widget for the devices that drives another widget showing a list of the IPSLA tests on the selected device.  I'd then like to have the widget with the list of tests drive the widget with the line graph visualization.  Should be simple, right?  The issue I'm running in to is with the widget for the list of IPSLA tests.  If I select a Table visualization, it only shows one of the tests configured on the selected device.  If I select a Configuration Table visualization, it shows a list of all of the tests on the selected device.  The problem is that the Configuration Table visualization does not support driving other widgets (like the one with the line graph visualization).Any thoughts on how to make this work?  Thanks. 

Hi,We have moved away from using the ISadmin account for Skylar Automate. Instead of the we using a SSO integration for the users and for integrations the API-Key possibilities.Looking at Skylar AutomationPowerPack v108 I can't see the option to use an API-Key in the SOAP/XML credential. My questions:Did I overlooked something?If not, how can we implement the API-Key?I think the usage of API-Key is applicable for more ScienceLogic clients.Thanks in advance.Alfred   

How can we do the Event Log Monitoring for Window machines.

  When is the 12.5.2 release is planned? We need to sort the below mentioned issue . Any tentative dates?https://support.sciencelogic.com/s/article/19184 

Py2 libraries are not removed automatically after upgrade 12.5.1 upgrade. 

 Regarding latest release vSphere PowerPack v309vSphere version 6.7.0 is supporting and working fine with the current running Vcenter base pack version v308, But the latest Vcenter base pack version 309 will not support vSphere version 6.7.0. (below 7)Hence with this how how we can proceed with upgrade to v309. Please suggest.

Is there somewhere documentation that explains tables in event_insight database.We would like to understand what are the alert_type and alert_category values used there. This database could be really interesting place to find for example alert statistics per organization or the noisiest collectors etc. Those things are otherwise pretty difficult to find.

Whether it is possible to monitor the runbook schedules ? We have some critical run book which used to run every day , some times it not running , we need an alert for this.

Hi,Is there some documentation available about how these custom credential types should be created and what different configuration options are available?Would be nice to have some documentation available where would be some instructions about different configuration possibilities available. For example what different type of fields I can create with this JSON configuration or how to configure regex validation for this specific field etc. Is there some documentation about this available or would it be possible to create one?

I am looking for a way to set a filter on Dashboard widget. This would be very helpful in use of it in my dashboards.

When creating automation policy, there is an option for selecting the Organization for where it "belongs", but still one needs to select devices from the device list, otherwise there is "no devices in organization" in Aligned Devices list.What about the situation where the device list can be pretty dynamic, like clouds. So devices come and go?Is the official method then to use device groups for that kind of alignment? Or are there other ways to enable RBA for organization's all devices.

As you may have noticed Microsoft have stopped including the SNMP service by default on server builds and only supports SNMP v2 natively. In this ever increasing world of security exploits, SNMP v2 is seen as insecure and a liability to run on all but air gapped networks, so why is the ScienceLogic preferred way of monitoring Windows Services still using SNMP?The SNMP Service monitoring allows you to monitor just the services of choice, unlike the blunderbuss PowerShell approach (where if the service is set to Automatic start-up and not running, it alerts). A 2am called out for a clipboard service outage and some grumpy emails in my inbox, and I'm inclined to agree with the very grumpy DBA that it is not ideal.Can we get some motion on sorting out the PowerShell monitoring, so that regardless of how we collect the service statuses we can alert consistently? 

Hi All,It is possible to automatically remove the collectors from CUG if the cpu/memory have reached above 90 % . The failover of devices should work with the performance of DC load as well ,not only down.

Hi All,  Why in SL1 we have two credential type universal and native SOAP /XML where we discover via the respective SDN technology ?What is recommended ones , when we create universal we can assign only to system ORG.

Does anyone know if it is possible to filter servers based on uptime in the SL1 dashboards.We are wanting to create a patching dashboard, which shows Patching server health but also highlights machines that have more then 35days uptime, but we cannot find a way to filter the uptimesThank you

Hi,For onboarding a serous amount of new customers I would like to create a universal credential with the API.I am not able to find some documentation what to use for the payload.I have tried with the API browser in SL1 to post an update on an existing credential resulting in an error : "x-em7-status-message":"credential could not be updated".Any suggestion how to overcome this issue? Thanks in advance.Alfred Heijkoop 

Hello Fellow ScienceLogic guru's,     Business services are quickly becoming our go to links to send executives, service owners and stakeholders in order to keep an eye on applications and services that they are responsible for or reliant on. Over the past year it has increased more and more as we get better at building business services and our internal / external customers want more out of them. To make business services a one stop solves everything solutions for people looking for a high level view of their services and applications we would like to see compliance brought into the page in some way. Showing devices which have security vulnerability's and risks     if you had external customers you may want to build them a different business service to look at if this information is not something you want shared but internally this becomes a real risk and would highlight when maintaining an application is / or is not taking place. I was hoping to get

Hello All,Has anyone successfully configured F5 telemetry streaming with SL1?  I was interested in solutions to accomplish this and haven't seen a lot of documentation on how to do this.If you have tips or methods you used to get this working, please let me know or point me to where I can learn more about this.  Thanks,William Adley

Good afternoonWe are looking at event tuning within SL1 and are wanting to have different thresholds based on the drive, so for example with our file servers we are looking to tune the events so that if the c: drive is over 90% full it logs a minor and if it is over 95% it logs a major for the device. But then with the shared drives we would want them to alert at as 96% and 98%, as they are larger drives.Does anyone know if this is possible and how it would be set up, as from what we can see you can only have a set threshold for every diskThank You

Could you help me understand the background processes when I initiate a "Force Config Push" (e.g., by clicking the lightning bolt icon) vs what differs from the standard config push process?'What steps does the system execute during a "Force Config Push" to apply configuration changes to managed devices?If the configuration push process is disabled, will clicking "Force Config Push" still result in a complete and successful configuration update to the target device(s)?Thanks

Hello everyone,  We are removing the Meraki API v115 PowerPack from the product download portal as we have discovered it shipped with code that requests the "/api/v1/networks/<dependency>/topology/linkLayer" endpoint even though the collection objects that utilize that data have not been added to the PowerPack yet.  This was intended to be shipped "dark" so it could be flipped on easily in the future when topology mapping features in the platform are available to take advantage of the data. However, since they are enabled in v115, users with a large number of networks in Meraki may experience unnecessary API calls (1 call per network every 5 minutes) being made which can cause API rate limit issues and/or additional collector load that previously was not there. This behavior would be expected in the future should a user "opt-in" to this additional API overhead in order to collect and utilize this topology data, but as there is no functionality currently available to uti