v.208 Release Notes

Last updated on 29 July, 2024

Feature Highlights

  • Alerting Name Change
  • Updates to LogicMonitor REST API v3 Swagger
  • 2FA for remote session support for SAML user/li>

Collector Settings

Security Upgrade

Windows Collectors Least Privilege

Windows Collectors can now run using non-administrator credentials. This provides you with improved security standards and mitigates the risk of unauthorized access and misuse within your installation environment.

Important: As a result of this security enhancement, you must migrate all Windows Collectors to run as non-admin.

You can use a prompt-based wizard to complete this migration.

To leverage the enhanced security, you need EA Collector 35.400 or later installed. For more information see the EA Collector 35.400 Release Notes.

For more information, see the following in the product documentation:

For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.

Security Upgrade

Linux Collectors Least Privilege

Linux Collectors can now run using non-root credentials. This provides you with improved security standards and mitigates the risk of unauthorized access and misuse within your installation environment.

Important: As a result of this security enhancement, you must migrate all Linux Collectors to run as non-root users.

You can use either a prompt-based wizard or a silent migration process to complete this migration.

To leverage the enhanced security, you need Collector GD 36.000 or later installed. For more information, see the GD Collector 36.000 Release Notes.

For more information, see the following in the product documentation:

For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.

Modules

Deprecation

Apache Groovy 4 Support for all LogicMonitor-Provided LogicModules

In a future release, LogicMonitor Collectors will no longer support Apache Groovy 2. All official LogicMonitor-provided modules will be compatible with Apache Groovy 4. To support this migration, LogicMonitor will be releasing updates to official LogicModules to be compatible with Groovy 4.

As a result of this migration, you must do the following:

  • Validate any customized or community-provided modules to ensure compatibility
    For more information about validating your customized modules, see Custom Module Groovy Migration Validation in the product documentation.
  • Install a module update for LogicMonitor-provided modules that have compatibility changes released. The released updated modules are listed in the LogicModules Release section.
    For more information, see LogicMonitor Provided Modules Groovy 4 Migration in the product documentation.

The LogicMonitor EA Collector 34.500 or later is compatible with Groovy 2 and Groovy 4. For more information about the EA Collector release, see the EA Collector 34.500 Release Notes.

Known Issue

When running a module using Apache Groovy 4, and using java.util.Date.format(), the following exception is thrown:

exception:groovy.lang.MissingMethodException: No signature of method: java.util.Date.format() is applicable for argument types: (String) values: [yyyy-MM-dd’T’HH:mm:ss z]

Note: This issue is fixed with the LogicMonitor Collector version 35.400 or later. To mitigate this issue when running a module using Apache Groovy 4, ensure you upgrade to the LogicMonitor Collector version 35.400 or later

Known Issue

When running a module using Apache Groovy 4, and the module includes an invalid type parameter for a data structure, the module throws the following runtime exception:

java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed:

Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.

Known Issue

When running a module using Apache Groovy 4 with legacy classes in your script, the following exception can be thrown:

java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed
To mitigate this issue, migrate to JPMS-compliant package names. Making this change does not break backward compatibility with Groovy 2.

For example, the following script uses legacy classes:

import groovy.util.XmlSlurper
import groovy.util.XmlParser
def xmlSlurper = new XmlSlurper()
def xmlParser = new XmlParser()

You can replace the legacy classes with JPMS-compliant package names in Groovy 4 to resolve the exception, similar to the following:

import groovy.xml.XmlSlurper
import groovy.xml.XmlParser
def xmlSlurper = new XmlSlurper()
def xmlParser = new XmlParser()

Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.

Known Issue

When running a module using Apache Groovy 4, the following exception can be thrown when using the GroovyScriptHelper to incorporate LogicMonitor snippets in your script:

exception:groovy.lang.MissingPropertyException: No such property:

To mitigate this issue, adjust the way the class is imported, similar to the following:

if(GroovySystem.version.startsWith("2.")) {
modLoader = com.logicmonitor.common.sse.utils.GroovyScriptHelper.getInstance()._getScript("Snippets", Snippets.getLoader())
} else {
modLoader = com.santaba.agent.groovy.utils.GroovyScriptHelper.getInstance("v4").getScript("Snippets", Snippets.getLoader())

For example, the following demonstrates how GroovyScriptHelper is used in Groovy 2:

import com.logicmonitor.common.sse.utils.GroovyScriptHelper as GSH
import com.logicmonitor.mod.Snippets
modLoader = GSH.getInstance()._getScript("Snippets", Snippets.getLoader()).withBinding(getBinding())
lmDebug = modLoader.load("lm.debug", "0", true)
lmDebug.default_context = "Test:SettingContext"

You can modify the script to use the GroovyScriptHelper in Groovy 4, demonstrated in the following:

import com.logicmonitor.mod.Snippets
if(GroovySystem.version.startsWith("2.")) {
modLoader = com.logicmonitor.common.sse.utils.GroovyScriptHelper.getInstance()._getScript("Snippets", Snippets.getLoader())
} else {
modLoader = com.santaba.agent.groovy.utils.GroovyScriptHelper.getInstance("v4").getScript("Snippets", Snippets.getLoader())
}
lmDebug = modLoader.load("lm.debug", "0", true)
lmDebug.default_context = "Test:SettingContext"

Important: LogicMonitor is releasing updates to official LogicModules to mitigate this issue for LogicMonitor-provided modules. If you are leveraging customized or community-provided modules, you must update the module to pass valid parameters into all data structures.

NetScan

Enhancement

Enhanced NetScan Script

The Scan History tab now displays the Resource Status column. You can now view the resource status information for NetScans. To view the status, navigate to Settings > NetScans > select the required NetScans > Scan History > Resource Status.

For more information, see the Viewing Resource Status Information article in our product documentation.

Resources

Enhancement

Alerting Name Change

The term Alert Generation is now called Alerting. When enabling or disabling alerts for datapoints, select Disable Alerting  or Enable Alerting from the alert tuning tab.

For more information, see the Alerts Tuning Tab (New UI) from product documentation.

REST API

Enhancement

Updates to LogicMonitor REST API v3 Swagger

In this release, we have added POST /setting/accessgroup/mapunmap/modules endpoint to the Access Group API. You can use this endpoint to provide details of one or multiple Logic Modules and access groups for mapping or unmapping. For more information, see REST API v3 Swagger Documentation.

Security Upgrade

API Token Authentication Restrictions

The ability to create API tokens is now restricted to users who are not lmsupport, along with users who do not have the Administrator role. This restriction prevents unauthorized access and potential misuse of elevated permissions, ensuring that API keys are generated and managed within a controlled and secure framework.

As a result of this restriction, you must migrate any previously created API tokens assigned to the LMSupport user or a user with the Administrator role to a new API token assigned to a new user and role with appropriate permissions.

To access this, navigate to Settings > Users and Roles > select the LMv1 API Token tab and add a new token.

For more information, see API Tokens.

For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.

Security Settings

Enhancement

2FA for remote session support for SAML user

To improve security, you can now enable two-factor authentication for remote session logins for SAML users by navigating to LogicMonitor portal > Settings > Account Information > Portal Settings > Enabling Remote Session.

Note: When Require Two-Factor Authentication for Remote Session is enabled in Portal Settings for a local user, SAML users will be directed to do a 2FA remote session too.

To access the remote session, navigate to Resource Tree > Manage Resource Options > Start Remote Session.

For more information, see Initiating a Remote Session.

User Access

Enhancement

Single Sign-On Configuration Updates

LogicMonitor has dropped the Tenant Name and Tenant Domain fields from the Single Sign-On configuration. However, these fields are mandatory when you configure multi-SSO.

Security Upgrade

Required Two-Factor Authentication for all Users

If your environment does not leverage Single Sign-On (SSO), all users with access to your LogicMonitor portal are required to use two-factor authentication (2FA) to access the portal. Leveraging 2FA provides you with stronger security measures to protect your account.

Using 2FA in your environment involves globally enabling 2FA in your LogicMonitor account and setting up 2FA account access using a third-party application, such as Authy.

To enable 2FA, navigate to Settings > Security Settings, and enable Require Two-Factor Authentication for all Roles and Users.

For more information about globally enabling 2FA for your LogicMonitor account, see Security Settings in the product documentation.

For more information about setting up 2FA with a third-party application, see Two-Factor Authentication Account Access in the product documentation.

For more information about LogicMonitor’s security mandates, see the Important Security Announcement in the LM Community.

Collector Releases

  • EA Collector 36.100 was released on July 01, 2024. For more information, see the EA Collector 36.100 Release Notes.
  • GD Collector 35.003 was released on July 02, 2024. For more information, see the GD Collector 35.003 Release Notes.

Container Monitoring Releases

Container Monitoring 8.1.0 was released on July 09, 2024. For more information on new Container Monitoring features, enhancements, fixed and known issues, and the upgrade steps, see Container Monitoring 8.1.0 Release Notes.

LogicModule Releases

New and updated LogicModules are available for you directly in your LogicMonitor portal. You can install new modules from the Exchange and update existing modules in My Module Toolbox. For more information, see Modules Installation, and Modules Management in the product documentation.

This section lists the LogicModules that are new in this release, updated in this release, or will be removed in a future release. Changes related to the LogicModule feature will be listed in the General Updates section.

New LogicModules

LogicModule NameDetails
1 DataSource:
– Veeam_BackupAndReplication_Jobs_Sync
Added new DataSource to capture BackupSync jobs since they are no longer duplicated by Veeam_BackupAndReplication_Jobs_Backups.
3 TopologySources:
  – Kubernetes_ConfigMap_Topology
  – Kubernetes_Secret_Topology
  – Kubernetes_ServiceAccount_Topology
Enhanced kubernetes topology.

Updated LogicModules

LogicModule NameDetails
2 PropertySources:
  – addCategory_Versa_SDWAN_Appliance
  – addERI_Versa_SDWAN
Updated tech notes to mention that the latest version of Versa_SDWAN_API is required.
1 DataSource:
– AWS_Bedrock
AWS Bedrock datasource updated to include OutputImageCount metrics.
1 LogSource:
– Meraki Assurance Alerts
Adjusted log fields to map “severity” to the Log Level field within the user interface.
3 DataSources:
  – AWS_QuickSight_Dashboards
  – AWS_QuickSight_Datasets
  – AWS_QuickSight_SPICEServiceLimits
Updated graph datapoints.
1 PropertySource:
– addERI_Windows
Allowed for HyperV VM MAC ERI.
1 DataSources:
  – PaloAlto_Prisma_SDWAN_EdgeHealth
Resolved issue with ConnectedState datapoint due to use of elvis operator.
1 EventSources:
  – Cisco Intersight Security Advisories
Remove duplicate events from being reported by the Cisco Intersight Security Advisories EventSource module.
8 DataSources:
  – Microsoft_Windows_Cluster_Network_Interfaces
  – Microsoft_Windows_Cluster_NodeStatus
  – Microsoft_Windows_Cluster_Nodes
  – Microsoft_Windows_Cluster_ResourceGroups
  – Microsoft_Windows_Cluster_Resources
  – Microsoft_Windows_Cluster_S2DStatistics
  – Microsoft_Windows_Cluster_S2DStoragePoolStatus
  – Microsoft_Windows_Cluster_S2DVirtualDisk
1 PropertySources:
  – addCategory_WindowsFailoverCluster
10 ConfigSources:
  – Microsoft_ActiveDirectory_Computers
  – Microsoft_ActiveDirectory_DomainController
  – Microsoft_ActiveDirectory_Domains
  – Microsoft_ActiveDirectory_FSMORoles
  – Microsoft_ActiveDirectory_Forests
  – Microsoft_ActiveDirectory_GroupPolicies
  – Microsoft_ActiveDirectory_OrganizationalUnits
  – Microsoft_ActiveDirectory_PasswordPolicy
  – Microsoft_ActiveDirectory_SitesSubnets
  – Microsoft_DHCP_IPv4LeasesConfig
Added logic to only attempt to connect when WinRM is enabled.
11 DataSources:
  – Veeam_BackupAndReplication_BackupSessions
  – Veeam_BackupAndReplication_HyperVProxyServers
  – Veeam_BackupAndReplication_Jobs_Backups
  – Veeam_BackupAndReplication_Jobs_ConfigBackup
  – Veeam_BackupAndReplication_Jobs_Copy
  – Veeam_BackupAndReplication_Jobs_ManagedAgentBackups
  – Veeam_BackupAndReplication_Jobs_SureBackups
  – Veeam_BackupAndReplication_Jobs_WindowsAgent
  – Veeam_BackupAndReplication_Repositories
  – Veeam_BackupAndReplication_ScaleOutRepositories
  – Veeam_BackupAndReplication_VMwareProxyServers
1 PropertySources:
  – addCategory_Veeam_BackupAndReplication_PowerShell
Adds a test for an existing connection before attempting a new connection. Login logic standardized. If veeam.user is used, a non-null veeam.pass property is required. If wmi.user is used, a non-null wmi.pass property is required.
1 DataSources:
  – Veeam_BackupAndReplication_Jobs_Copy
Fixed an issue for jobs not being reused. 
1 DataSources:
  – Veeam_BackupAndReplication_Jobs_SureBackups
Failover added for deprecated command. 
1 DataSources:
– Veeam_BackupAndReplication_Jobs_ConfigBackup
Updated the status codes for Result datapoint in alerts to match the values set in the script.
29 TopologySources:
  – Kubernetes_AWS_Topology
  – Kubernetes_Azure_Topology
  – Kubernetes_ClusterRoleBinding_OwnerRef_Topology
  – Kubernetes_ClusterRoleBinding_Topology
  – Kubernetes_ClusterRole_OwnerRef_Topology
  – Kubernetes_CronJob_Topology
  – Kubernetes_Daemonset_Topology
  – Kubernetes_Deployment_Topology
  – Kubernetes_Job_Topology
  – Kubernetes_Netpol_OwnerRef_Topology
  – Kubernetes_Netpol_Topology
  – Kubernetes_Node_KSM_Topology
  – Kubernetes_Node_Topology
  – Kubernetes_PC_OwnerRef_Topology
  – Kubernetes_PDB_OwnerRef_Topology
  – Kubernetes_PDB_Topology
  – Kubernetes_PVC_Topology
  – Kubernetes_PV_Topology
  – Kubernetes_Pod_KSM_Topology
  – Kubernetes_Pod_OwnerRef_Topology
  – Kubernetes_Pod_Topology
  – Kubernetes_Replicaset_Topology
  – Kubernetes_RoleBinding_Topology
  – Kubernetes_Role_OwnerRef_Topology
  – Kubernetes_Rolebinding_OwnerRef_Topology
  – Kubernetes_SC_OwnerRef_Topology
  – Kubernetes_ServiceAccount_OwnerRef_Topology
  – Kubernetes_Service_Topology
  – Kubernetes_Statefulset_Topology
Enhanced kubernetes topology.

3 DataSources:
  – Cisco_DNAC_Clients
  – Cisco_DNAC_Devices
  – Cisco_DNAC_Networks
Added tech note to modules warning about API issues when used in conjunction with Cisco Catalyst Center modules.
1 DataSources:
  – SNMP_Network_Interfaces
Expanded list of devices that use getconcurrent SNMP method by default to include Juniper ex4650-48y-8c.
1 PropertySources:
  – addCategory_NetApp
Resolved an issue with the version number in addCategory_NetApp for the new API.
1 DataSources:
  – WinProcessStats-
Fixed datatype of ProcessCPUPercent from integer to decimal.