ScienceLogic AI Platform

I have a script that manages devices groups. The groups are simple, using a single rule, custom attribute SiteID = xxxx. Because the legacy API does not allow for the creation/application of the rules, I was directly manipulating the DB. We are moving to SAS - no more direct DB access. I need some GQL magic to create/apply a rule to a group. 

Hello,  We are pleased to announce the release of the ServiceNow CMDB SyncPack v3.6.3. This SyncPack addresses the following issues: Addressed an issue which prevented the interface sync GraphQL query from working if the SL1 AP2 version was 8.18.43-81 (JellyBean) or later. Addressed an issue that caused the device sync to fail due to the "EM71" region being overwritten. To address the issue, the "/api/v1/cache/dev-classes" API endpoint was updated to make the "default_dev_ class_id" and "servicenow_default_id" options configurable. You can download this and other SyncPacks from the Product Downloads > PowerPacks & SyncPacks tab on the Support portal.  Please review the release notes for this SyncPack carefully before installing it.  Thank you, Release Management

There is any possibility to create a AP2 dashboard to display the devices which are greater than 50% of avg cpu ? Anyone have tried sorting with output value is also not possible. 

Hi All,  Whether we can monitor the sync pack application failures and alert into ScienceLogic 

I have a failed powerflow, how do I see the actuall error   

We have a certain type of device that we are not allowed to do active SNMP monitoring, only traps. It sends us a heartbeat trap every minute as long as it is "up". Is there a way to make an event policy that alerts in the absence of an event? In this case, we would need to generate a critical event if the heartbeat hasn't been received for > 10 minutes. I currently have the heartbeat trap set as a "healthy" event policy. Apologies if there is some documentation about this topic that I have missed!

The Auto Diagnostics feature is available  for Cloud environment???

Hello,  We're pleased to announce the release of ServiceNow Service Graph Connector SyncPack v1.1.1.  Issues Addressed The following issues are addressed in this release: Addressed an issue which prevented the interface sync GraphQL query from working if the SL1 AP2 version was JellyBean or later. Addressed an issue where devices merged in the Service Graph Connector with topology relationships caused an error. As part of the fix for this issue, a new enable_advanced_topology toggle was added to the device and interface syncs. The toggle is disabled by default. Additional System Requirements: "Base Steps" SyncPack version 1.5.5 or later. "ServiceNow Base" SyncPack version 3.8.0 or later. ServiceNow version Tokyo or later with Web Services enabled. ServiceNow CMDBCI Class Models version 1.49.0 or later. You can download the class models from the ServiceNow Store. "Service Graph Connector for ScienceLogic" application version 1.0.2. You can download the application from the

network throughput monitoring available on ScienceLogic.

Hi encountered an issue where simply launching a PowerShell terminal on a Windows server causes the CPU to spike to 100%? We're currently experiencing this behaviour on a windows server. No scripts are being executed — the spike occurs immediately upon opening the terminal.Additionally, our data collection process involves launching a new PowerShell instance for each script, which significantly compounds the CPU load and severely impacts server performance.We have turned off AV to test and same issue 

Reading the release notes on 12.5 it is indicating that a STIG'd box cannot be upgraded to 12.5 at this time. Does anyone know when it will be?

Is there any PPK in development or anything already existing that would allow us to monitor the Cisco Secure Access environment in SL?Cisco Secure Access is a cloud-delivered security service edge (SSE) solution that provides secure access to resources from anywhere, leveraging a zero-trust approach. It combines various security capabilities like ZTNA, SWG, CASB, and FWaaS into a single, cloud-managed platform. This simplifies IT operations, enhances security posture, and offers a seamless user experience for accessing applications and data.  API Docs

Is there a supported way of disabling the WebConfig page on appliances portals and collectors, including that it does not get re-enabled on next update?Thanks

In any decent enterprise there is a requirement to backup system and also do periodic tests for restoring data from backups.Is anyone here doing some kind of testing for those backups that SL1 makes. Testing directly to production stack is pretty heavy and disturbing effort, especially if there are some issues in backup.So do you have special routines to test those backups?

Need to know how i can add Device Name or Root Device Name for Component Devices in Event Message under Event Policy.

Does anyone have example code for creating/deleting device services, API or GQL?

Hi All,I have been bashing my head against a wall trying to extract filesystem config data (as seen in the hardware pages https://<SL1Platform>/frame/Hardware).Is there anyway to extract filesystem configuration data using GQL (I can query the Performance data fine).Many thanks in advanceNeil

This seems to be a difficult question. We had the pleasure to find out that TMUX is introduced and forced into SL1 from 12.2.1 and later, and then we were even more happy that 12.3.4 introduced that TMUX is not anymore forced, but can be enabled at will.The 12.3.4 is again without TMUX by default, but the session handling is even more stricter with timeouts. The timeout is now handled differently, so even if you are running for example "tail -f ..." command for debugging something and the screen is updated constantly the session will be killed if you are not pressing any keys during 15min.TMUX has its own good and bad features and we are learning them hard way. In multiadmin environments when TMUX enabled it will always be a surprise into what session you hop into when opening a new session.Found in one KB and in 12.3.4 that there is a new section [OS_HARDENING] available in silo.conf, not much documentation about that though. Would be interesting to know what can be tuned there.

We have this kind of issueDevice is monitored with SNMP and also by Juniper Mist system. So actually there is first two separate devices in SL1. Because that device is a switch stack of for physical switches which also need to be discovered. The stacked devices discovery is pretty simple for us, we create component device for each physical device and get serials and firmware versions etc (CMDB requirements).But when we merge then this goes a bit messy. SNMP monitoring is done from a CUG in customer network, Mist connection is done from separate CUG which has access to Internet. All basic stuff is fine, but the component devices (those physical switches) will have interesting situation:the component device it self is mapped correctly to customer CUG, which is needed to get snmp access to that networkDA will be aligned to backend CUG, the one which is used for connecting to Mist, and which of course does not have access to customer CUG/collector where the cache is stored.So, is there any

Please as there is no documentation does anyone successfully use DB2 HADR powerpack ? For interconnection, do I need ssh + db2 credentials combination ? Should I define some DB2 credential and then mapped to SSH credential within new Soap credential ? how to map ? Or do I need only Soap with mapped ssh id header ? Thank you very much.  

I'm trying to get a SQL Server instance discovered by SL1 which refuses to even determine SQL Server is installed. All the discovery does is return this message:SQL Server discovery returned empty from SqlAppCollectionInstance data collectorThe Windows device seems to have no issues. SQLPS is installed and working. SQL Server permissions have been granted as required (but it doesn't appear to be getting as far as logging in to the instance - it simply doesn't recognize SQL Server is installed).I've tried rerunning winrm_configuration_wizard_v3.4.ps1, which worked for another machine that was returning the same sort of error.I've tried removing the SQL DAs and realigning via pre-defined template & credentials (which work perfectly fine for other servers in the domain).I'd rather not have to delete the Windows device and perform complete discovery from scratch; this shouldn't be necessary.Ideas?Full log from discovery session:1.    Collector Task session registered...2. &nb

We are showing the "Output Packets" metric from the "AIX: Network Stats" DA in a dashboard but we want to only show the network interface named "en1" (and not en0 etc), is this possible in a dashboard widget ?From the Device page if you look at this metric you can tick/select which interface you want to see or select the interface via "Options -> Series Selection" and we want to do the same from the Dashboard widget.Any advice really appreciated as I am struggling to find how to do this, it works ok from a Linux DA using context driven dashboard as the metrics are stored under "Interfaces" rather than "Devices" but for AIX this is not the case.

Is there a way to add Cisco Stacked switches to ScienceLogic to allow the ServiceNow CMDB SyncPack to sync the switches that are not master using Sync Devices from SL1 to ServiceNow?  I can export the stack switches from the data collected from the Entity Configuration application to get a list of all switches and serial numbers.  We would like to have the ability to add stack switches as some type of device to sync using ServiceNow CMDB.Thanks 

I just added a new device group but the schedule and Icons show greyed out imageshow do I fix that so I can create schedules  

We recently onboarded some Ubiquiti switches which ScienceLogic does not have a default pack for. I discovered that the "EdgeSwitch" mibs have relevant OIDs for performance metrics for these devices. One OID that we're interested in is "CPU Process Percent Utilization" (1.3.6.1.4.1.4413.1.1.1.1.4.8.1.3). The out of the box SNMP Performance Dynamic App Presentation is not able to parse the output of this OID, here's a sample:agentSwitchCpuProcessPercentageUtilization  u'5 Sec (  0.00%)    60 Sec (  0.08%)   300 Sec (  0.04%)'Is there any way to easily get this to display in an SNMP Performance DA chart, or do I have to use a Snippet DA and custom code to parse this output into an integer for display? Ideally I'd be able to use the 300 second average as this DA runs on a 5 minute polling cycle.