LogicMonitor
Visualize LogicMonitor devices in the JupiterOne graph. Use this integration as part of a Unified Device use case.
- Installation guide
- LogicMonitor data model
- LogicMonitor types
Installation
Requirements
- User requires Bearer token generated in LogicMonitor Account.
- You must have permission in JupiterOne to install new integrations.
Configuration in LogicMonitor
Create Bearer Token
- Follow the instructions found here to create a Bearer Token.
- Save the token in a secure location, following your organization's security policies.
Configuration in JupiterOne
- From the top navigation of the J1 Search homepage, select Integrations
- Search for the LogicMonitor and select it.
- Click on the Add Instance button and configure the following settings:
- Enter the Account Name by which you'd like to identify this LogicMonitor
instance in JupiterOne. Ingested entities will have this value stored in
tag.AccountName
when Tag with Account Name is checked. - Enter a Description that will further assist your team when identifying the integration instance.
- Select a Polling Interval that you feel is sufficient for your monitoring
needs. You may leave this as
DISABLED
and manually execute the integration. - Enter the Company Subdomain. If you log in in at
https://<company>.logicmonitor.com
, then<company>
is the company subdomain. - Enter the LogicMonitor Bearer Token generated for use by JupiterOne.
- Click Create Configuration once all values are provided.
Next steps
Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.
Data Model
Entities
The following entities are created:
Resources | Entity _type | Entity _class |
---|---|---|
Account | logicmonitor_account | Account |
Device | logicmonitor_device | Device |
Logicmonitor Device
logicmonitor_device
inherits from Device
Property | Type | Description | Specifications |
---|---|---|---|
category * | string | null | Derived from the system property namee: "system.systemtype" | |
osComputerName | string | Derived from the auto property named: "auto.os.computer_name" | |
osArchitecture | string | Derived from the auto property named: "auto.os.architecture" | |
osPrimaryOwnerName | string | Derived from the auto property named: "auto.os.primary_owner_name" | |
systemGroups | array of string s | ||
endpointCaption | string | Derived from the auto property named: "auto.endpoint.caption" | |
logCollectorGroupId * | number | The id of the Collector Group associated with the device's log collection | |
disableAlerting * | boolean | Indicates whether alerting is disabled (true) or enabled (false) for this device | |
netflowCollectorGroupId * | number | The id of the Collector Group associated with the device's netflow collector | |
rolePrivileges * | array of string s | ||
isPreferredLogCollectorConfigured * | boolean | Indicates whether Preferred Log Collector is configured (true) or not (false) for the device | |
hostStatus * | string | The status of this device, where possible statuses are: normal, dead and dead-collector | Any of: normal dead dead-collector |
autoBalancedCollectorGroupId * | number | The Auto Balanced Collector Group id. 0 means not monitored by ABCG | |
deviceType * | string | The type of device: Regular device, APPGROUP device, AWS device, Service device, Azure device, Biz Service device, GCP device, K8S device | |
currentCollectorId * | number | The id of the collector currently monitoring the device and discovering instances | |
netflowCollectorId * | number | The Id of the netflow collector associated with the device | |
autoPropsAssignedOn * | number | ||
preferredCollectorGroupId * | number | The id of the Collector Group associated with the device's preferred collector | |
collectorDescription * | string | The description/name of the collector for this device | |
preferredCollectorId * | number | The Id of the preferred collector assigned to monitor the device | |
lastReportedNewflowDataOn | number | The last time, in epoch seconds, that raw Netflow data was reported | |
awsDeviceDiedOn | number | The timestamp when the AWS device went dead, or the AWS device was filtered out | |
netflowCollectorGroupName * | string | The name of the Collector Group associated with the device's netflow collector | |
instanceState | string | The CSP (GCP, Azure, or AWS) instance state (if applicable): running, stopped and terminated. | |
relatedAwsEc2InstanceDeviceId | number | The Id of the AWS EC2 instance related to this device, if one exists in the LogicMonitor account. This value defaults to -1, which indicates that there are no related devices | |
logCollectorGroupName * | string | The name of the Collector Group associated with the device's. | |
displayName * | string | The display name of the device | |
logCollectorDescription * | string | The description/name of the log collector for this device | |
autoPropsUpdatedOn | number | The time, in epoch seconds, that auto properties last ran and updated the properties table for this device | |
scanConfigId | number | The Id of the netscan configuration which was used to discover this device. 0 indicates that the device was not discovered by a scan | |
enableNetflow * | boolean | Indicates whether Netflow is enabled (true) or disabled (false) for the device | |
lastSeenOn * | number | null | The last time, in epoch seconds, that the device received Netflow data | |
hostGroupIds | array of string s | ||
currentLogCollectorId * | number | The id of the Log collector currently collecting logs. | |
logCollectorId * | number | The Id of the netflow collector associated with the device | |
netflowCollectorDescription * | string | The description/name of the netflow collector for this device | |
userPermission * | string | The read and/or write permissions for this device that are granted to the user who made the API request | |
preferredCollectorGroupName * | string | The name of the Collector Group associated with the device's preferred collector | |
deviceWillBeDeletedOn | number | The number of milliseconds until the device will be automatically deleted from your LogicMonitor account (if value is not present, this indicates that a future delete time/date has not been scheduled) | |
externalResourceId | string | Included if found at prefdef.externalResourceID in response | |
cmdbUrl | string | Included if found at sn.cmdb_url in response |
Logicmonitor Account
logicmonitor_account
inherits from Account