v.208 Release Notes
Last updated on 29 July, 2024Collector Settings
Windows Collectors Least Privilege
Windows Collectors can now run using non-administrator credentials. This provides you with improved security standards and mitigates the risk of unauthorized access and misuse within your installation environment.
Important: As a result of this security enhancement, you must migrate all Windows Collectors to run as non-admin. |
You can use a prompt-based wizard to complete this migration.
To leverage the enhanced security, you need EA Collector 35.400 or later installed. For more information see the EA Collector 35.400 Release Notes.
For more information, see the following in the product documentation:
- Migrating Windows Collector from Admin to Non-admin User
- Credentials for Accessing Remote Windows Computers
- Windows Server Monitoring and Principle of Least Privilege
For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.
Linux Collectors Least Privilege
Linux Collectors can now run using non-root credentials. This provides you with improved security standards and mitigates the risk of unauthorized access and misuse within your installation environment.
Important: As a result of this security enhancement, you must migrate all Linux Collectors to run as non-root users. |
You can use either a prompt-based wizard or a silent migration process to complete this migration.
To leverage the enhanced security, you need Collector GD 36.000 or later installed. For more information, see the GD Collector 36.000 Release Notes.
For more information, see the following in the product documentation:
For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.
Modules
Apache Groovy 4 Support for all LogicMonitor-Provided LogicModules
In a future release, LogicMonitor Collectors will no longer support Apache Groovy 2. All official LogicMonitor-provided modules will be compatible with Apache Groovy 4. To support this migration, LogicMonitor will be releasing updates to official LogicModules to be compatible with Groovy 4.
As a result of this migration, you must do the following:
- Validate any customized or community-provided modules to ensure compatibility
For more information about validating your customized modules, see Custom Module Groovy Migration Validation in the product documentation. - Install a module update for LogicMonitor-provided modules that have compatibility changes released. The released updated modules are listed in the LogicModules Release section.
For more information, see LogicMonitor Provided Modules Groovy 4 Migration in the product documentation.
The LogicMonitor EA Collector 34.500 or later is compatible with Groovy 2 and Groovy 4. For more information about the EA Collector release, see the EA Collector 34.500 Release Notes.
When running a module using Apache Groovy 4, and using java.util.Date.format(), the following exception is thrown:
exception:groovy.lang.MissingMethodException: No signature of method: java.util.Date.format() is applicable for argument types: (String) values: [yyyy-MM-dd’T’HH:mm:ss z]
Note: This issue is fixed with the LogicMonitor Collector version 35.400 or later. To mitigate this issue when running a module using Apache Groovy 4, ensure you upgrade to the LogicMonitor Collector version 35.400 or later
When running a module using Apache Groovy 4, and the module includes an invalid type parameter for a data structure, the module throws the following runtime exception:
java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed:
Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.
When running a module using Apache Groovy 4 with legacy classes in your script, the following exception can be thrown:
java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed
To mitigate this issue, migrate to JPMS-compliant package names. Making this change does not break backward compatibility with Groovy 2.
For example, the following script uses legacy classes:
import groovy.util.XmlSlurper
import groovy.util.XmlParser
def xmlSlurper = new XmlSlurper()
def xmlParser = new XmlParser()
You can replace the legacy classes with JPMS-compliant package names in Groovy 4 to resolve the exception, similar to the following:
import groovy.xml.XmlSlurper
import groovy.xml.XmlParser
def xmlSlurper = new XmlSlurper()
def xmlParser = new XmlParser()
Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.
When running a module using Apache Groovy 4, the following exception can be thrown when using the GroovyScriptHelper to incorporate LogicMonitor snippets in your script:
exception:groovy.lang.MissingPropertyException: No such property:
To mitigate this issue, adjust the way the class is imported, similar to the following:
if(GroovySystem.version.startsWith("2.")) {
modLoader = com.logicmonitor.common.sse.utils.GroovyScriptHelper.getInstance()._getScript("Snippets", Snippets.getLoader())
} else {
modLoader = com.santaba.agent.groovy.utils.GroovyScriptHelper.getInstance("v4").getScript("Snippets", Snippets.getLoader())
For example, the following demonstrates how GroovyScriptHelper is used in Groovy 2:
import com.logicmonitor.common.sse.utils.GroovyScriptHelper as GSH
import com.logicmonitor.mod.Snippets
modLoader = GSH.getInstance()._getScript("Snippets", Snippets.getLoader()).withBinding(getBinding())
lmDebug = modLoader.load("lm.debug", "0", true)
lmDebug.default_context = "Test:SettingContext"
You can modify the script to use the GroovyScriptHelper in Groovy 4, demonstrated in the following:
import com.logicmonitor.mod.Snippets
if(GroovySystem.version.startsWith("2.")) {
modLoader = com.logicmonitor.common.sse.utils.GroovyScriptHelper.getInstance()._getScript("Snippets", Snippets.getLoader())
} else {
modLoader = com.santaba.agent.groovy.utils.GroovyScriptHelper.getInstance("v4").getScript("Snippets", Snippets.getLoader())
}
lmDebug = modLoader.load("lm.debug", "0", true)
lmDebug.default_context = "Test:SettingContext"
Important: LogicMonitor is releasing updates to official LogicModules to mitigate this issue for LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.
NetScan
Enhanced NetScan Script
The Scan History tab now displays the Resource Status column. You can now view the resource status information for NetScans. To view the status, navigate to Settings > NetScans > select the required NetScans > Scan History > Resource Status.
For more information, see the Viewing Resource Status Information article in our product documentation.
Resources
Alerting Name Change
The term Alert Generation is now called Alerting. When enabling or disabling alerts for datapoints, select Disable Alerting or Enable Alerting from the alert tuning tab.
For more information, see the Alerts Tuning Tab (New UI) from product documentation.
REST API
Updates to LogicMonitor REST API v3 Swagger
In this release, we have added POST /setting/accessgroup/mapunmap/modules endpoint to the Access Group API. You can use this endpoint to provide details of one or multiple Logic Modules and access groups for mapping or unmapping. For more information, see REST API v3 Swagger Documentation.
API Token Authentication Restrictions
The ability to create API tokens is now restricted to users who are not lmsupport, along with users who do not have the Administrator role. This restriction prevents unauthorized access and potential misuse of elevated permissions, ensuring that API keys are generated and managed within a controlled and secure framework.
As a result of this restriction, you must migrate any previously created API tokens assigned to the LMSupport user or a user with the Administrator role to a new API token assigned to a new user and role with appropriate permissions.
To access this, navigate to Settings > Users and Roles > select the LMv1 API Token tab and add a new token.
For more information, see API Tokens.
For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.
Security Settings
2FA for remote session support for SAML user
To improve security, you can now enable two-factor authentication for remote session logins for SAML users by navigating to LogicMonitor portal > Settings > Account Information > Portal Settings > Enabling Remote Session.
Note: When Require Two-Factor Authentication for Remote Session is enabled in Portal Settings for a local user, SAML users will be directed to do a 2FA remote session too.
To access the remote session, navigate to Resource Tree > Manage Resource Options > Start Remote Session.
For more information, see Initiating a Remote Session.
User Access
Single Sign-On Configuration Updates
LogicMonitor has dropped the Tenant Name and Tenant Domain fields from the Single Sign-On configuration. However, these fields are mandatory when you configure multi-SSO.
Required Two-Factor Authentication for all Users
If your environment does not leverage Single Sign-On (SSO), all users with access to your LogicMonitor portal are required to use two-factor authentication (2FA) to access the portal. Leveraging 2FA provides you with stronger security measures to protect your account.
Using 2FA in your environment involves globally enabling 2FA in your LogicMonitor account and setting up 2FA account access using a third-party application, such as Authy.
To enable 2FA, navigate to Settings > Security Settings, and enable Require Two-Factor Authentication for all Roles and Users.
For more information about globally enabling 2FA for your LogicMonitor account, see Security Settings in the product documentation.
For more information about setting up 2FA with a third-party application, see Two-Factor Authentication Account Access in the product documentation.
For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.
Collector Releases
- EA Collector 36.100 was released on July 01, 2024. For more information, see the EA Collector 36.100 Release Notes.
- GD Collector 35.003 was released on July 02, 2024. For more information, see the GD Collector 35.003 Release Notes.
Container Monitoring Releases
Container Monitoring 8.1.0 was released on July 09, 2024. For more information on new Container Monitoring features, enhancements, fixed and known issues, and the upgrade steps, see Container Monitoring 8.1.0 Release Notes.
LogicModule Releases
New and updated LogicModules are available for you directly in your LogicMonitor portal. You can install new modules from the Exchange and update existing modules in My Module Toolbox. For more information, see Modules Installation, and Modules Management in the product documentation.
This section lists the LogicModules that are new in this release, updated in this release, or will be removed in a future release. Changes related to the LogicModule feature will be listed in the General Updates section.
New LogicModules
LogicModule Name | Details |
1 DataSource: – Veeam_BackupAndReplication_Jobs_Sync | Added new DataSource to capture BackupSync jobs since they are no longer duplicated by Veeam_BackupAndReplication_Jobs_Backups. |
3 TopologySources: – Kubernetes_ConfigMap_Topology – Kubernetes_Secret_Topology – Kubernetes_ServiceAccount_Topology | Enhanced kubernetes topology. |
Updated LogicModules
LogicModule Name | Details |
2 PropertySources: – addCategory_Versa_SDWAN_Appliance – addERI_Versa_SDWAN | Updated tech notes to mention that the latest version of Versa_SDWAN_API is required. |
1 DataSource: – AWS_Bedrock | AWS Bedrock datasource updated to include OutputImageCount metrics. |
1 LogSource: – Meraki Assurance Alerts | Adjusted log fields to map “severity” to the Log Level field within the user interface. |
3 DataSources: – AWS_QuickSight_Dashboards – AWS_QuickSight_Datasets – AWS_QuickSight_SPICEServiceLimits | Updated graph datapoints. |
1 PropertySource: – addERI_Windows | Allowed for HyperV VM MAC ERI. |
1 DataSources: – PaloAlto_Prisma_SDWAN_EdgeHealth | Resolved issue with ConnectedState datapoint due to use of elvis operator. |
1 EventSources: – Cisco Intersight Security Advisories | Remove duplicate events from being reported by the Cisco Intersight Security Advisories EventSource module. |
8 DataSources: – Microsoft_Windows_Cluster_Network_Interfaces – Microsoft_Windows_Cluster_NodeStatus – Microsoft_Windows_Cluster_Nodes – Microsoft_Windows_Cluster_ResourceGroups – Microsoft_Windows_Cluster_Resources – Microsoft_Windows_Cluster_S2DStatistics – Microsoft_Windows_Cluster_S2DStoragePoolStatus – Microsoft_Windows_Cluster_S2DVirtualDisk 1 PropertySources: – addCategory_WindowsFailoverCluster 10 ConfigSources: – Microsoft_ActiveDirectory_Computers – Microsoft_ActiveDirectory_DomainController – Microsoft_ActiveDirectory_Domains – Microsoft_ActiveDirectory_FSMORoles – Microsoft_ActiveDirectory_Forests – Microsoft_ActiveDirectory_GroupPolicies – Microsoft_ActiveDirectory_OrganizationalUnits – Microsoft_ActiveDirectory_PasswordPolicy – Microsoft_ActiveDirectory_SitesSubnets – Microsoft_DHCP_IPv4LeasesConfig | Added logic to only attempt to connect when WinRM is enabled. |
11 DataSources: – Veeam_BackupAndReplication_BackupSessions – Veeam_BackupAndReplication_HyperVProxyServers – Veeam_BackupAndReplication_Jobs_Backups – Veeam_BackupAndReplication_Jobs_ConfigBackup – Veeam_BackupAndReplication_Jobs_Copy – Veeam_BackupAndReplication_Jobs_ManagedAgentBackups – Veeam_BackupAndReplication_Jobs_SureBackups – Veeam_BackupAndReplication_Jobs_WindowsAgent – Veeam_BackupAndReplication_Repositories – Veeam_BackupAndReplication_ScaleOutRepositories – Veeam_BackupAndReplication_VMwareProxyServers 1 PropertySources: – addCategory_Veeam_BackupAndReplication_PowerShell | Adds a test for an existing connection before attempting a new connection. Login logic standardized. If veeam.user is used, a non-null veeam.pass property is required. If wmi.user is used, a non-null wmi.pass property is required. |
1 DataSources: – Veeam_BackupAndReplication_Jobs_Copy | Fixed an issue for jobs not being reused. |
1 DataSources: – Veeam_BackupAndReplication_Jobs_SureBackups | Failover added for deprecated command. |
1 DataSources: – Veeam_BackupAndReplication_Jobs_ConfigBackup | Updated the status codes for Result datapoint in alerts to match the values set in the script. |
29 TopologySources: – Kubernetes_AWS_Topology – Kubernetes_Azure_Topology – Kubernetes_ClusterRoleBinding_OwnerRef_Topology – Kubernetes_ClusterRoleBinding_Topology – Kubernetes_ClusterRole_OwnerRef_Topology – Kubernetes_CronJob_Topology – Kubernetes_Daemonset_Topology – Kubernetes_Deployment_Topology – Kubernetes_Job_Topology – Kubernetes_Netpol_OwnerRef_Topology – Kubernetes_Netpol_Topology – Kubernetes_Node_KSM_Topology – Kubernetes_Node_Topology – Kubernetes_PC_OwnerRef_Topology – Kubernetes_PDB_OwnerRef_Topology – Kubernetes_PDB_Topology – Kubernetes_PVC_Topology – Kubernetes_PV_Topology – Kubernetes_Pod_KSM_Topology – Kubernetes_Pod_OwnerRef_Topology – Kubernetes_Pod_Topology – Kubernetes_Replicaset_Topology – Kubernetes_RoleBinding_Topology – Kubernetes_Role_OwnerRef_Topology – Kubernetes_Rolebinding_OwnerRef_Topology – Kubernetes_SC_OwnerRef_Topology – Kubernetes_ServiceAccount_OwnerRef_Topology – Kubernetes_Service_Topology – Kubernetes_Statefulset_Topology | Enhanced kubernetes topology. |
3 DataSources: – Cisco_DNAC_Clients – Cisco_DNAC_Devices – Cisco_DNAC_Networks | Added tech note to modules warning about API issues when used in conjunction with Cisco Catalyst Center modules. |
1 DataSources: – SNMP_Network_Interfaces | Expanded list of devices that use getconcurrent SNMP method by default to include Juniper ex4650-48y-8c. |
1 PropertySources: – addCategory_NetApp | Resolved an issue with the version number in addCategory_NetApp for the new API. |
1 DataSources: – WinProcessStats- | Fixed datatype of ProcessCPUPercent from integer to decimal. |