ScienceLogic AI Platform

Last week we upgraded our Lab Env to 12.1.2 and the DB's to OL8. Tried the in-place collector upgrade to OL8 and only one of the two collectors upgraded. The other is still at OL7. Each collector is in it's own collector group.We have Windows devices 3 of them at ver 2019, 2016, & 2012 using AD credentials and port 5986. Concurrent Powershell is enabled. The servers were on the OL7 collector and data collection was working just fine.I moved the Windows devices to the Collector running OL8 and data collection stopped working. If I disabled Concurrent Powershell for that OL8 collector, data started collecting again. So far I have not found anything in the logs.Linux and MSSql are working fine with out issue (so far).Has anyone else seen this with Windows since upgrading DB's and Collectors to 12.1.2 OL8

We are looking for a solution to a way where we can bulk discover servers which are not centralized/managed by Active Directory. In our environment where AIX/Linux is decentralized and not managed by Active Directory. Currently, as per understanding this is a one by one onboarding of such devices. Condition: Server SL1 user id password to be managed by CyberARK.Cons: Too many individual credential for each discovery.

We were supposed to be upgraded to v12.2 but problems with Aurora (the AWS database offering) we have ben placed onto v12.1.2.We were handed the system on September the 9th, and the release notes are dated the 10th. It has zero backward compatibility with collectors (all must be on 12.1.2) and we've been plagued with critical system alerts before we even attached a collector. I kind of get the feeling that we're alpha testing this release.... ☹️Can anyone else, give me some comfort and confirm that we are not the Guinea Pigs for this release?

Upgraded to SL1 v12.2.1.2 last night and had some bumps but for most part my organization is doing okay. Seen several positive changes in the UI like a much improved Events page however I'm having problems with my themes. I have both a lab and a production systems. To keep myself from accidentally doing stuff in production when I think I'm in the lab, in the past I put a dark theme on production and a light theme on my lab. Since the upgrade I'm seeing light theme pages in certain pages, despite the fact that the dark theme is applied (and reapplied for good measure).Is this a known issue?Anyone else seeing this behavior?

How might one go about suppressing a syslog event for a specific interface, but still receive all other events for that device and interface?For example, you have a syslog event message like: 5238379<187>267450: LC/0/1/CPU0:Aug 20 17:38:21.939 EDT: ifmgr[214]: %PKT_INFRA-LINK-3-UPDOWN : Interface TenGigE0/1/1/7, changed state to DownYour existing event policy uses regex match logic as follows:First Regular Expression:PKT_INFRA-LINK-[35]+-[^\s]+Second Regular Expression:to.*(DOWN|Down|down)Identifier Pattern:Interface\s+([^ ,]+)Identifier Format:Interface: %1Would you modify the event policy in some way? Is there other levers/knobs to in the system to tinker with that might get you the desired result?

Hi - Where would a person find the last login time for accounts that login with the API?  I have checked Access Sessions and the report Inactive User and the API sessions do not get logged.  I am not able to load Audit Logs without a timeout to see if the API sessions would be available there.Thanks 

How can I get server device CPU or Memory utilisation data from the API in bulk. I can get this from individual servers by specifying the device_id (i.e. /api/device/<device_id>/performance_data/838/data?duration=24h) but there must be a faster and less system taxing way? The documentation specifies how to get performance data in bulk (Requesting Performance Data from the API in Bulk (sciencelogic.com)), but not for all servers where class_type=linux as an example. 

This might be an oldie...How should we manage devices which have multiple overlapping IP addresses. For example Layer3 switches or router HA pairs can have same IP addresses set up to two or multiple devices for routing high availability or management reasons. This then makes SL1 see same IP addresses in multiple devices. And that then generates events into System organization, events like: A Message Collector is managing multiple devices with an overlapping secondary IP address: Secondary IP address overlap on devices managed by Message Collector: 101 | Collector Groups: 44 | IP Address: 128.0.0.127 | Device IDs: 70999, 70998, 71001, 71009, 71005, 71003, 71006, 71004, 71007, 71002, 71013, 71012, 71015, 71010, 71014, 71008, 71016Ok, that IP address can be deleted from database, but the nightly discovery again brings up the same issue next day. And because those are network devices where every now and then are some changes done in interfaces I believe we just have to have the Auto-

Hello ALLI have the following formula for an unhealthy alert object: result('o_31218', label="DataGuard is o_31218 logs behind in following Env:PrimaryDB:o_31214  SecondaryDB: o_31215 LastLogRec: o_31217 Difference: o_31218 ") >= 0 How can I get the Subject to contain object o_31214 and the body of the email to display what is listed in the above Policy Formula with the objects replaced with actual values ?

Is it possible to make a dynamic app to keep collecting data even when a device becomes unavailable(e.g. Device failed availability check: icmp) ?

We trying to pull the details of thresholds configured for individual devices through API,The system threshold API has the information of latency, availability and data retention related information's, whereas the required details like CPU, Memory and disk space related details are not coming up, is there any way to pull these information through API? /api/device/3/device_thresholds3 is one of our device ID. ThanksGautham 

Hi EveryoneI am currently trying to gather information about low-code in ScienceLogic, including how it works, what updates and changes have been made, how it can be implemented, and how we can effectively use it. If anyone can provide related documents or resources, it would be very helpful for me

The versions of the agents are more or less independent from the SL1 releases. This is giving the flexibility to release and install agents in faster cycle. By making it a independent software component the need for release information becomes crucial. The information in the SL1 release notes does not comply anymore.Is it possible to post the Release Note for agents on a site?It should contain the normal topics, versions, fixed issues, new features, known issues, dependencies etc.Thanks in advance.  

We have a need to automate lots of BSM service creations and I am struggling with GQL now.We have created attribute to be used for harquery {customAttributes  (first: 7, search: {name: {eq: "BSM_Region"}})  {  edges {    node {id label type entity alignmentType        }        }    }}and that gives us: {  "data": {    "customAttributes": {      "edges": [        {          "node": {            "id": "57",            "label": "BSM_Region",            "type": "string",            "entity": "harProvider",            "alignmentType": "extended"          }        }      ]    }  }}If I then try to align that attribute

Hello fellow members.I humbly come to ask for help about a problem we are facing in our EM7 system.  We've created some SNMP Performance Dynamic Applications that the OIDs return OctetString values, such as "20 mbar". Then, how could we treat this data in order to plot it in Device Performance? We are avoiding to create a python snippet, cause this system have an old python version installed and most compatible SNMP libraries are not available anymore.EM7 Version: EM7 G3 - 8.7.1 - Build 211Bellow finds some pictures to help understand this issue:Device Performance without any data because it cannot read OctetString.Collection Objects. Each object returns a differente type of value, i.e. Cycle Time returns a integer and Output Pressure returns a OctetString.MIB Browser Result.Anybody could assist us?Thanks in advance.

Hello, I hope someone can assist with the following. I am using Device Component Mapping to create a hierarchical/tree structure of devices, but SL seems to assign the Parent Device attribute randomly for each device created, and I need to be able to set the Parent Device correctly, so that the hierarchical structure is correct.I have data that contain a set of locations that correspond to the tree structure. The structure has this concept: One Country -> Many Cities -> Many Buildings -> Many Rooms. Each data record has an id, a name, a parent id and a type. The data is split into cities, buildings and rooms. For example, a city record might be as follows: id: CITYPARIS, name: Paris, parent id: CTRYFRANCE, type: city. A building record might be as follows: id: BLDGMONTPARNASSE, name: Tour Montparnasse, parent id: CITYPARIS, type: building. And to complete the picture, a room record might be as follows: id: ROOMMEETING1, name: Meeting Room 1, parent id: BLDGMONTPARNASSE, type:

Hi All,We need to disable interface internal collection for certain devices. Whether it is possible to do via any device group or device class or model? Basically we don't want the interface utilization data to be polled for all devices. 

Is anyone aware of a PowerPack containing an Environment/Library with newer Paramiko support, compatible with SL1 11.2?We have run into devices that don't allow older Paramiko cipher support in the default environment.Thank you!

Looking for a way to filter on devices by a particular org   Tried using the following method SL1stacksite.net/api/device?limit=10&searchspec?organization=xx 

How to Fix powershell communication error Forward and reverse name resolution is not properly configured for server?We have multiple windows server in which we are facing this issue and server have multiple DNS entries and we can delete them. also i tried to add IP and host in sciencelogic data collector also added in dnsmsaq-resolve.conf to resolve this issue but still we are facing this error Forward and reverse name resolution is not properly configured for server, how to fix this issue without deleting DNS entries.

Is there a way to check who is logged into SL1 at any time?

I was reading kb article https://support.sciencelogic.com/s/article/8788 and was not sure if this affected all platform versions.Is logrotate.status an issue in 12.2.1?

What is the best sl1 architecture for monitoring endpoint Devices in DR site during OS VM's/application failover to DR site 

Regarding the recent CrowdStrike Falcon XDR/EPP incident:  A content patch caused Windows-based systems to crash. CrowdStrike has identified and addressed the issue.  ScienceLogic products are unaffected.  Our Linux-based appliances are not impacted by this Windows-specific issue.  Your ScienceLogic products continue to operate normally. For questions, please contact your Customer Engagement Manager or our Support Team.   

We are stuck trying to recreate some of the metrics we collect in our current Python2 snippets using pipes.The specific example is 'ping', which required subprocesses, no longer allowed. We don't believe  latency_ping,avail_ping from silo_tools will let us collect packet_count, packet_loss, avg_latencies, latencies that a library like ping3 allows. (used to calculate jitter and else)Some of the libraries seem to require raw sockets and/or elevated privileges. So our question is two fold.1 - Can we import custom libraries such as Ping3?2 - How do we use elevated privileges on the collectors, as some libraries require elevated priveleges?Thanks in advance, Dan