To monitor a large number of resources in Dependent Alert Mapping (DAM), you can increase the DAM node limit beyond the default 10,000 nodes. To increase the DAM node limit, establish connections between entry point seeds and their associated Collectors. These connections are created automatically through Topology and ERI sources.

When connected, a Collector can be used as the entry point in the DAM rule. This setup enables you to further scale the node limit. To do so, contact your system administrator and configure the Collector and resource settings. This ensures that scaling occurs without downtime, topology service timeouts, or disruption to the existing DAM functionality.

Requirements for Optimizing Dependent Alert Mapping

To optimize Dependent Alert Mapping, you need the following:

  • A dynamic resource group that pulls in all resources defined as entry points in DAM rules. You can filter resources by a common characteristic (type, role, or tag) or assign a custom property to keep them consistently grouped. 
  • Download the following JSON files on your machine:

Optimizing Dependent Alert Mapping

To optimize DAM, complete the following steps:

  1. Add PropertySource to Assign ERIs to Collectors
  2. Add TopologySource to Connect Entry Point Seeds and Collectors
  3. Create Collector Group for Dependent Alert Mapping
  4. Modify Dependent Alert Mapping Rule
  5. Verify Dependent Alert Mapping

Adding PropertySource to Assign ERIs to Collectors

  1. In LogicMonitor, navigate to Settings > LogicModules.
  2. On the My Module Toolbox page, select Add module Add.
  3. In the Add window, select Import from File.
    Import from file selection on Add window
  4. Browse for addERI_collectorMapping.json and import the file.
    After the module imports successfully, the Modules page displays.
  5. Select the AppliesTo tab.
    By default, system.collector is set to true.
  6. Select Test AppliesTo Test AppliesTo to view the resources connected to the Collector.
    The resources display in the side panel.
    Test AppliesTo on PropertySource page
  7.  Select Cancel to close the PropertySource.
    The new ERI applies to the Collector device with the format lmcid_collectorid.
    You can view the ERI in the predef.externalResourceID property. 
    For example, predef.externalResourceID = lmcid_100 where, collectorid=100.
    ERI applied to Collector device

Adding TopologySource to Connect Entry Point Seeds and Collectors

  1. In LogicMonitor, navigate to Settings > LogicModules.
  2. On the My Module Toolbox page, select Add module Add.
  3. In the Add window, select Import from File.
  4. Browse for collector_to_entrypoint_toposource.json and import the file.
  5. Select Save.
    After the module imports successfully, the TopologySource Modules page displays.
  6. Select the AppliesTo tab.
  7. Enter join(system.groups,",") =~ "Entry point resource group".
  8. Select Test AppliesTo Test AppliesTo to view the resources connected to the Collector.
    Test AppliesTo on TopologySource page
  9. Select Save.
    This automatically creates edges (connections) between entry point devices and the Collectors monitoring them.

Creating Collector Group for Dependent Alert Mapping

  1. In LogicMonitor, navigate to Resource Tree > Add moduleDynamic Group
    For more information, see Dynamic Resource Groups.
    Dynamic Group selection on Add Resources window
  2. Create a new dynamic resource group.
    For example, DAM_Entry_Point_Collectors.
  3. Add all Collectors to this group.
    For example, Collector1, Collector2, and Collector3.
    The group acts as the entry point in DAM.

Modifying Dependent Alert Mapping Rule

  1. In LogicMonitor, navigate to Settings > Alert > Dependent Alert Mapping.
  2. On the Dependent Alert Mapping page, select Manage DAM Manage.
  3. Select “DAM_Entry_Point_Collectors” in the Group field and “*” in the Resources field.
    Alerts from entry point devices depend on the Collector group.
    Groups and Resource selection for updates to DAM rule
  4. Verify the entry point settings.
    For more information, see Configuring Dependent Alert Mapping
  5. Select Save.

Verifying Dependent Alert Mapping

  1. In LogicMonitor, navigate to Settings > Audit Logs.
    The Audit Logs page displays.
  2. Verify the logs to confirm DAM mappings are applied correctly.