LogicMonitor
Visualize LogicMonitor devices in the JupiterOne graph. Use this integration as part of a Unified Device use case.
- Installation
- Data Model
- Types
- Release Notes
Installation
The LogicMonitor integration authenticates with an API token created for a user in your LogicMonitor account. You can use either an LMv1 token (an Access ID and Access Key pair) or a Bearer Token. Choose whichever token type suits your environment when you configure the instance.
Requirements
- A LogicMonitor user who can create API tokens. Any user role except the out-of-the-box administrator role can create tokens, and the Allow Creation of API Token checkbox must be enabled under Settings > User Profile.
- The user the token belongs to must have View permission on the resource groups you want to ingest. Devices are only returned for groups the token's user can view.
- You must have permission in JupiterOne to install new integrations.
LogicMonitor assigns permissions at the resource-group level, and the API acts as the token's user. A device is ingested only if the token's user holds View permission on the group that contains it.
Configuration in LogicMonitor
Creating an instance requires one of the following token types.
Create an LMv1 token (Access ID and Access Key)
- In LogicMonitor, navigate to Settings > User Access > Users and Roles > LMv1 API Token.
- Select the Add API Token (+) icon.
- In the User field, select the user the token should act as. The Access ID and Access Key are populated automatically.
- Select Save.
- Copy and store the Access Key in a secure location, following your organization's security policies. It is shown only once.
Create a Bearer Token
- Follow the instructions in LogicMonitor's Adding a Bearer Token guide to create a Bearer Token.
- Save the token in a secure location, following your organization's security policies.
Configuration in JupiterOne
- From the top navigation of the JupiterOne Search homepage, select Integrations.
- Search for LogicMonitor and select it.
- Select Add Instance and configure the following settings:
- Enter the Account Name by which you'd like to identify this LogicMonitor instance in JupiterOne. Ingested entities have this value stored in
tag.AccountNamewhen Tag with Account Name is checked. - Enter a Description that will further assist your team when identifying the integration instance.
- Select a Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as
DISABLEDand manually execute the integration. - Enter the Company Subdomain. You can find it in the URL when you log into LogicMonitor. For example, if you log in at
https://<your-company>.logicmonitor.com, then<your-company>is the company subdomain. - Select the token type you created and provide its credentials:
- For Bearer Token, enter the Bearer Token generated for use by JupiterOne.
- For LMv1 Auth, enter the Access ID and Access Key of the user account whose token you created.
- Select Create Configuration once all values are provided.
Advanced Configuration
| Field | Description | Default |
|---|---|---|
| Custom Device Properties | A comma-separated list of properties to include on each ingested device entity, for example sys.id,cust.field.data. | None |
Next steps
Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.
Entities
The following entities are created:
| Resources | Entity _type | Entity _class |
|---|---|---|
| Account | logicmonitor_account | Account |
| Device | logicmonitor_device | Device |
Logicmonitor Account
logicmonitor_account inherits from Account
Logicmonitor Device
logicmonitor_device inherits from Device
| Property | Type | Description | Specifications |
|---|---|---|---|
autoBalancedCollectorGroupId * | number | The Auto Balanced Collector Group id. 0 means not monitored by ABCG | |
autoPropsAssignedOn * | number | ||
autoPropsUpdatedOn | number | The time, in epoch seconds, that auto properties last ran and updated the properties table for this device | |
awsDeviceDiedOn | number | The timestamp when the AWS device went dead, or the AWS device was filtered out | |
category * | string | null | Derived from the system property namee: "system.systemtype" | |
cmdbUrl | string | Included if found at sn.cmdb_url in response | |
collectorDescription * | string | The description/name of the collector for this device | |
currentCollectorId * | number | The id of the collector currently monitoring the device and discovering instances | |
currentLogCollectorId * | number | The id of the Log collector currently collecting logs. | |
deviceType * | string | The type of device: Regular device, APPGROUP device, AWS device, Service device, Azure device, Biz Service device, GCP device, K8S device | |
deviceWillBeDeletedOn | number | The number of milliseconds until the device will be automatically deleted from your LogicMonitor account (if value is not present, this indicates that a future delete time/date has not been scheduled) | |
disableAlerting * | boolean | Indicates whether alerting is disabled (true) or enabled (false) for this device | |
displayName * | string | The display name of the device | |
enableNetflow * | boolean | Indicates whether Netflow is enabled (true) or disabled (false) for the device | |
endpointCaption | string | Derived from the auto property named: "auto.endpoint.caption" | |
externalResourceId | string | Included if found at prefdef.externalResourceID in response | |
hostGroupIds | array of strings | ||
hostStatus * | string | The status of this device, where possible statuses are: normal, dead and dead-collector | Any of: normaldeaddead-collector |
instanceState | string | The CSP (GCP, Azure, or AWS) instance state (if applicable): running, stopped and terminated. | |
isPreferredLogCollectorConfigured * | boolean | Indicates whether Preferred Log Collector is configured (true) or not (false) for the device | |
lastReportedNewflowDataOn | number | The last time, in epoch seconds, that raw Netflow data was reported | |
lastSeenOn * | number | null | The last time, in epoch seconds, that the device received Netflow data | |
logCollectorDescription * | string | The description/name of the log collector for this device | |
logCollectorGroupId * | number | The id of the Collector Group associated with the device's log collection | |
logCollectorGroupName * | string | The name of the Collector Group associated with the device's. | |
logCollectorId * | number | The Id of the netflow collector associated with the device | |
netflowCollectorDescription * | string | The description/name of the netflow collector for this device | |
netflowCollectorGroupId * | number | The id of the Collector Group associated with the device's netflow collector | |
netflowCollectorGroupName * | string | The name of the Collector Group associated with the device's netflow collector | |
netflowCollectorId * | number | The Id of the netflow collector associated with the device | |
osArchitecture | string | Derived from the auto property named: "auto.os.architecture" | |
osComputerName | string | Derived from the auto property named: "auto.os.computer_name" | |
osKernel | string | Derived from "auto.linux.kernel.release" on Linux devices, or "auto.os.version" on Windows devices (NT kernel version format) | |
osPrimaryOwnerName | string | Derived from the auto property named: "auto.os.primary_owner_name" | |
preferredCollectorGroupId * | number | The id of the Collector Group associated with the device's preferred collector | |
preferredCollectorGroupName * | string | The name of the Collector Group associated with the device's preferred collector | |
preferredCollectorId * | number | The Id of the preferred collector assigned to monitor the device | |
relatedAwsEc2InstanceDeviceId | number | The Id of the AWS EC2 instance related to this device, if one exists in the LogicMonitor account. This value defaults to -1, which indicates that there are no related devices | |
rolePrivileges * | array of strings | ||
scanConfigId | number | The Id of the netscan configuration which was used to discover this device. 0 indicates that the device was not discovered by a scan | |
systemGroups | array of strings | ||
userPermission * | string | The read and/or write permissions for this device that are granted to the user who made the API request |
Release Notes
- 2026-03-31 — Added OS kernel version property to LogicMonitor device entities.
- 2025-04-17 — Added ServiceNow system ID as a device identifier on LogicMonitor device entities.