ScienceLogic AI Platform

In conjunction with AP2 KeyLimePie, a new PowerPack called Business Services Sample Services and Polices has been created. This pack can be downloaded from the customer support portal. The goal of the pack is to give you a head start of how to use Business Services for a common range of technologies and various Health, Availability, and Risk scenarios. Each service and policies follows the 80/20 rule, where by as supplied it will cover 80% or your needs, so you can tweak the remaining 20% to your specific needs.  What is this new pack? In the pack is a Business Services template 'Business Services Sample Services and Policies 2025-03-19'. When you use this template is will deploy 15 sample device services. Each service is pre-configured with device search rules and a Service Policy specific designed to give you a good starting point.  Some policies are aligned to specific technologies, while some provide samples of how to use Service Policies for specific goals. Sa

We have this kind of issue.discovered thousands of vmware virtual machines in SL1only need to sync one customer (few hundred vms) into CMDB. So we want to avoid syncing all those thousands into CMDBIn PF it is easy to run custom runs with one organization, but can we, and if then how, set the custom configuration to sync just one or few device classes. Or otherway, to add some device classes to that normal deviceclass configuration

Hi All,I have come accross a puzzle managing some custom classes accross multiple SL stacks.With the following scenario...1. You create a custom device class and add it to a powerpack. 2. You delete the powerpack without removing the class3. In Device Class Editor, you can see the class had 'Yes' still in the 'Powerpack' Colunm. You can also see the linked (now deleted) PPK GUID in the master.definitions_dev_classes table.Is this correct/ expected behaivour that the class remains linked to the now non-existant powerpack? If so, is there a supported way to "unlink" it so the class can be resused in a diffeent powerpack (without having to recreate it and suffer a new GUID to be used)Many ThanksColin.

Hi All,  Anyone thought of monitoring the ScienceLogic stacks with full stack observability tools like APPD, Dynatrace etc.? Basically i am interested to see what is happening inside the SL1 appliance like DC ,MC and CDB process level .Whether SL1 supports to install apm agents in the appliance. 

Hi,  dose anyone know of a script that you run, to detail your ScienceLogic application's configuration, so that you can write a ScienceLogic "as-built" application document?   Not interested in the underlying servers for this particular ask, as my use case is a ScienceLogic SaaS instance.Thanks! Anne

Is there a better way to disable the webconfig page?So far what I have is to remove these two files, and restart nginx./opt/em7/share/config/nginx.d/em7webconfig.fragment /etc/nginx/conf.d/em7webconfig.conf 

We have a situation where a single DA aligned with a root device caches data about component devices which it then uses to populate metrics for both the root and component devices.Does anyone have some more detail on what happens - at a CUG level - if the collector aligned to the root device becomes unavailable? How does another collector in the CUG know that it needs to start caching data (is that via config push?) and does the whole DCM tree need to be rebuilt but aligned with a different collector?Equally - is there any smarter way to avoid the "Device failed availability" event for the child devices which is only occurring because the cached data from the root device is not available (and not because the child devices really have an availability problem)>

Since upgrading to 12.2.5, terminal sessions  get disconnected after around an hour, even when 'unset TMOUT'. Is there a way to change this so that user sessions are not dropped?  

 We Want Your Insights!  We would love to connect with you one-on-one to gather your feedback and insights about PowerFlow. Your experiences are key to shaping the future of our product! Why Chat? Share your thoughts on how we can improve Discuss any challenges you’ve faced Help us prioritize features that matter to you Please note that these calls are not intended to address issues that can be resolved through Support Cases. Ready to make an impact? Book a call with us now! Thanks for being part of our journey! 

Is any way if we can add certificate name on SSL events notifier??

Hi - We are trying to create events from Versa syslog alarms.   The format of the syslog message is in the below URL.Syslog Message Format Forwarded by Versa Analytics : Versa SupportThe issue is the PRI is missing from the syslog header and rsyslog does not create the alert in SL1.  Is there a way to use a rsyslog policy to create an alert for these messages missing the PRI?If I use the same syslog message and add <165> to the start of the message for the PRI it works.Thanks   

 Hi All,  Is there is any report in Sl1 where we can get the avg ,min ,max ,utilization In/Out ,bits In/Out and bandwidth in/out  of  interfaces which are monitored in a single reports ?

Hi,During SL1 version update we have noticed that EM7_RESULT variable is going to be re-formatted to different type during snippet execution. For example if we populate the variable with list and with tuple elements, the variable is getting re-formatted to nested list. For example EM7_RESULT = [("test1", "test2")], is re-formatted after snippet execution to [["test1", test2"]] format.Is this change documented somewhere and in which version this update was implemented?

We have some devices that we know run high CPU overnight during backups etc so what is the best way to suppress a single metric event for one (or multiple) devices at a specific time (e.g. 02:00 -> 04:00) on specific days (e.g Mon -> Fri) from alerting out via powerflow, can this be suppressed at a metric level (as we don;t want to suppres the entire device), or can this be suppressed at a PowerFlow level to then not be sent on during these suppress times/days ?

Hi, it seems there is no PowerPack available for monitoring the cloud flows of Microsoft Power Automate. Is there anything being developed for this?Or, has anyone built anything themselves?We have a customer who wants to monitor the performance of a cloud flow, with errors, triggers of a cloud flow and whether a cloud flow is working or not. 

Hi - Is it possible to have an automation to run the action only if all of the aligned events exist at the same time?   I don't want the action to run if only one aligned event exists but all aligned events to be true.Thanks

We have approximately 300 virtual desktop VMware Virtual Machines that we do not want to monitor via the VMware Vcenter PowerPack in SL1. All other Virtual Machines and Virtual Hosts will be monitored as normal.Is there anyway of filtering/suppressing/vanishing these devices so we do not monitor them and they do not get counted in our licence count ?

Hi all, I'm trying to upload a new device icon for a custom Powerpack I'm creating (Ruckus SNMP). I've taken a screenshot of the logo as a .png.First I tried to follow the documentation here, found a tool to convert the png to a svg, and SL shows me an error:Next, I just tried uploading the png in various sizes (128, 300, and 600). All of them successfully upload, and show an actual icon the Icon browser minus that grey frame (see screenshot below). However, when I apply this Icon in the Device Class view, the device itself just shows a blank window where the icon would be. Anyone had any experience doing this? 

Hi, For trouble shoot, I want to have an overview of the devices linked to the collector where the (SNMP) device is allocated to. Pulling all the devices with attributes are working fine, also the related collector group and his group members. I am not able to find a solution to get device-to-collector. Is someone having a example GQL? Any suggestions? Thanks in advance. Alfred  

Does anyone have an example of using the low code step: store_data? I have no problems storing the data, but trying to pass it to the next html step with the data being the URI. low_code: id: ID-1 version: 2 steps: - http: uri: /type/10 - json - jmespath: value: "employee[0].URI" - store_data: storage_keyHow do I call the stored value? I tried just putting in result_container.metadata["storage_key"] but that is not working. I expect there is some part of syntax I'm getting wrong. Doc Used: https://docs.sciencelogic.com/dev-docs/low_code_tools_v102/steps/available_steps.html#steps-store-data

By anyway can we schedule a audit report where the devices are deleted or vanished in last 24 hrs ?

Hi All,  Whether by anyway or plan from Sl1 to use the SNMP catching response for non snippet based Dynamic application. As of now i hope we can use the catching repose only for snippet based DA.

ScienceLogic maximizes customers' investments in ServiceNow through its powerful suite of pre-built integrations, referred to as SyncPacks. ScienceLogic offers certified ServiceNow scoped applications for streamlined platform integration, accessible via the ServiceNow Store, ensuring seamless compatibility. Understanding the licensing requirements for ServiceNow integrations is crucial for informed decision-making. This document seeks to clarify the IT Operations Management (ITOM) licensing requirements for ScienceLogic integrations with ServiceNow. Its purpose is to eliminate any confusion regarding which integrations necessitate ITOM licensing. Note: ServiceNow’s ITOM licensing is further organized into different tiers. This document is not intended to help identify the suitable tier for your requirements. For any questions related to this, please contact ServiceNow. Scoped Application ServiceNow Module ITOM License requirement ScienceLogic SL1: Customer Service Management Integr

Hi All,I've Developed a Runbook Action within ScienceLogic, that triggers a Powerflow Application if certain Runbook Automation Policy conditions are met.Upon execution, it sends the following payload:"params": {     "configuration": configuration,     "event_policy_name": EM7_VALUES['%_event_policy_name'],     "event_details": EM7_VALUES,     "organization_name": EM7_VALUES['%O'],     "system_url": system_url,     "queue": queue}These parameters are specified as inputs, and some are derived from the EM7Values.When the Runbook Automation linked to this Action executes against a specific Event Policy raised on a Device, i can see a success message in the "Event Notifications" window, and i can see all inputs and variables are passed through in its entirety.The real issue comes when you open Powerflow. The Application immediately fails, and an error message stating that theres an "Internal Requ

Question about collector event management load versus number of defined event policies. We just got requirement to add some 800 trap event policies into our SL1, and I started to wonder what kind of effect that will have in collector load. So, when trap is coming in how is that checked against defined event policies. For example how much it slows collector if number of trap event policies go from 2k to 3k? Especially when there is anyway quite constant "flood" of traps anyway more or less all the time.And because there is still (SL1 12.1.*) no way to tell that "use these policies on this CUG only" but all the policies will be distributed to all CUGs, so the load is added everywhere.