Dashboards
LMQL aggr_over_time Support for percentile_over_time Rollups
You can now include percentile_over_time:N rollups in the aggr_over_time function in LogicMonitor Query Language (LMQL), alongside existing rollups such as avg_over_time, max_over_time, and sum_over_time. This enhancement provides greater flexibility when querying and reporting percentile values with other over-time aggregations.
You can specify an integer percentile value from 0 through 100, such as percentile_over_time:95 or percentile_over_time:40. When you specify multiple rollups, the API returns a separate result for each rollup and matching instance or datapoint. The Function field identifies the rollup associated with each result, including individual percentile values.
aggr_over_time queries without percentile rollups and standalone percentile_over_time( < query>, N) queries are unchanged.To access this functionality, navigate to Dashboards > create an Advanced Metrics widget. Use percentile_over_time:N in the aggr_over_time function in the Query Builder. Alternatively, you can manually enter the queries using raw query.
For more information, see LogicMonitor Query Language (LMQL) Reference in the product documentation.
Dashboard Refresh for On-Demand Widget Data Updates
You can now refresh applicable widgets on the current dashboard on demand without performing a full browser refresh. The Refresh icon displays next to Dashboard Time and refreshes the dashboard widgets with the latest data while preserving your current dashboard context.
To access this feature, navigate to a dashboard and select the Refresh icon.
For more information, see Dashboards Management in the product documentation.
NOC Widget OK Status Filter
You can now use an OK alert status in the NOC widget configuration. This setting is enabled by default.
When you disable the toggle, the widget excludes healthy resources and displays resources that match the remaining enabled statuses.
To access this feature, navigate to the NOC widget configuration and toggle OK in the Alert Statuses to Display settings.
For more information, see NOC Widget in the product documentation.
Advanced Cloud Provider Health Event Timeline Visualization
You can now display Cloud Provider Health Events as a timeline visualization within the Cloud Provider Health Widget. You can display timeline data using vertical or horizontal options. This enhancement provides context to cloud health events, enabling you identify trends and potential downstream issues in your cloud environments.
For more information, see Cloud Provider Health Event Widgets in the product documentation.
LM Logs
IIS Server Logs
You can now monitor Microsoft Internet Information Services (IIS) access logs by using the OpenTelemetry (OTel) Collector. The IIS Server Logs LogSource simplifies IIS log onboarding by automatically collecting and parsing IIS access logs into structured metadata for querying, alerting, and dashboarding. It supports standard IIS log locations and extracts commonly used IIS fields to accelerate troubleshooting and operational visibility.
You must use the OpenTelemetry (OTel) Collector for Windows version 7.0.00 or later.
To access this feature, navigate to Logs > Modules > Exchange and add the IIS Server Logs LogSource.
Resource Association for Log Tracked Queries
You can now associate a tracked query with an existing LogicMonitor resource when tracking a query. This enhancement enables tracked query instances to be created under the selected resource instead of a default resource, providing better visibility and easier navigation from the associated resource.
To access this feature, navigate to Logs > Manage Saved Views, select a saved query, and then select Track query.
For more information, see Log Query Tracking and Tracked Query Management in the product documentation.
Complex Filtering for Syslog and SNMP Traps LogSource Configuration
You can now define Syslog and SNMP Trap LogSource filters by using a single free-text complex filter query instead of configuring legacy filters one row at a time. Complex filters support multiple filter predicates combined with AND, OR, and parentheses, enabling you to create more flexible and expressive filtering logic. Only log messages or SNMP traps that match the configured complex filter are ingested.
-
You must use EA Collector 40.700 or later to configure complex filtering for Syslog and SNMP Traps LogSources.
-
A complex filter can contain up to 100 predicates.
-
Only valid attribute, operator, and value combinations are accepted for each LogSource type.
-
For SNMP Trap LogSources, when filtering on VarBindValue, pair it with the corresponding VarBindKey.
To access this feature, navigate to Modules > My Module Toolbox > Add a Syslog or SNMP Trap LogSource and enable the Use complex filter toggle.
For more information about using complex filtering, see Syslog LogSource Configuration and SNMP Traps LogSource Configuration in the product documentation.
Modules
Enhanced paloalto.prismasdwan Snippet
The enhanced paloalto.prismasdwan snippet improves collection reliability when the Prisma SD-WAN API reaches its rate limit. The snippet now retries rate-limited requests using exponential backoff and honors the Retry-After response header.
The snippet also reduces API requests by caching configuration responses and access tokens by tenant service group. It excludes inactive, disconnected, or unassigned elements from metric collection and removes literal “null” values from topology External Resource IDs (ERIs).
For more information, see Palo Alto Prisma SD-WAN Monitoring in the product documentation.
Enhanced lm.data.topo Snippet
The enhanced lm.data.topo snippet improves external resource type (ERT) assignment when generating topology data. Linux resources are more accurately matched to the PhysicalServer ERT, Sophos XG firewalls are matched to the Firewall ERT, and ArubaCX Switches receive improved ERT assignment.
In addition, the Cisco ASA matching pattern is more specific. Linux resources with “ASA” in their system information are correctly classified, reducing incorrectly classified resources in your topology maps.
Enhanced Cisco UCS-X NetScan
The enhanced Cisco UCS-X NetScan now assigns the cisco.intersight.serial property to all discovered chassis, server, and fabric interconnect resources. You can use this consistent property to identify and filter Cisco UCS-X resources during onboarding.
For more information, see Cisco UCS-X Series Monitoring in the product documentation.
Fortinet_FortiGate_HighAvailabilityPeers Deprecated and Replaced by Fortinet_FortiGate_HAPeers
The Fortinet_FortiGate_HighAvailabilityPeers module is deprecated and replaced by Fortinet_FortiGate_HAPeers. The new module adds support for filtering standalone resources to prevent duplicate alerts and unnecessary instance creation.
You can retain historical data and use standalone-resource filtering by disabling monitoring for the existing Fortinet_FortiGate_HighAvailabilityPeers module and importing the Fortinet_FortiGate_HAPeers module.
Fortinet_FortiGate_HAPeers.Apache Groovy 2 Support Removal and Replaced with Apache Groovy 4 Support for all LogicMonitor-Provided LogicModules
In a future release, LogicMonitor Collectors will no longer support Apache Groovy 2. All official LogicMonitor-provided modules are compatible with Apache Groovy 4. To support this migration, LogicMonitor released updates to official LogicModules to be compatible with Groovy 4.
As a result of this migration, you must do the following:
- Validate any customized or community-provided modules to ensure compatibility
For more information about validating your customized modules, see Custom Module Groovy Migration Validation in the product documentation. - Install a module update for LogicMonitor-provided modules that have compatibility changes released.
For more information, see LogicMonitor Provided Modules Groovy 4 Migration in the product documentation. - Update Enhanced Script NetScans to Groovy 4 compatible scripts.
For more information, see “Enhanced Script NetScans Now Groovy 4 Compatible” in the Modules section of the Release Notes.
For more information on the timeline of this migration, see Apache Groovy 2 End-of-Life Milestone Public Announcement.
The GD Collector 39.004 now uses Groovy 4 instead of Groovy 2.
In Apache Groovy 4, the behavior of the push() method for the List class is reversed. In Apache Groovy 2.4, the push() method would add an item to the list, in Apache Groovy 4 push() will work on the first item of a List.
// v4 Behavior
def numbers = [1, 2, 3, 4]
numbers.push(5)
println numbers
// OUTPUT: [5, 1, 2, 3, 4]
// v2.4 Behavior
def numbers = [1, 2, 3, 4]
numbers.push(5)
println numbers
// OUTPUT: [1, 2, 3, 4, 5]
To mitigate this issue, migrate to using add() in place of push():
def numbers = [1, 2, 3, 4]
numbers.add("5")
println numbers
// OUTPUT: [1, 2, 3, 4, 5]
// v4 Behavior
def numbers = [1, 2, 3, 4]
println numbers.pop()
// OUTPUT: 1
// v2.4 Behavior
def numbers = [1, 2, 3, 4]
println numbers.pop()
// OUTPUT: 4
To mitigate this issue, migrate to using remove() in place of pop():
def numbers = [1, 2, 3, 4]
println numbers.remove(numbers.size() - 1)
// OUTPUT: 4
When running a module using Apache Groovy 4, and the module includes an invalid type parameter for a data structure, the module throws the following exception:
java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed:
Reports
LMQL aggr_over_time Support for percentile_over_time Rollups
You can now include percentile_over_time:N rollups in the aggr_over_time function in LogicMonitor Query Language (LMQL), alongside existing rollups such as avg_over_time, max_over_time, and sum_over_time. This enhancement provides greater flexibility when querying and reporting percentile values with other over-time aggregations.
You can specify an integer percentile value from 0 through 100, such as percentile_over_time:95 or percentile_over_time:40. When you specify multiple rollups, the API returns a separate result for each rollup and matching instance or datapoint. The Function field identifies the rollup associated with each result, including individual percentile values.
aggr_over_time queries without percentile rollups and standalone percentile_over_time(, N) queries are unchanged.To access this functionality, navigate to Reports > create a Metrics Explorer report. Use percentile_over_time:N in the aggr_over_time function in the Query Builder. Alternatively, you can manually enter the queries using raw query.
For more information, see LogicMonitor Query Language (LMQL) Reference in the product documentation.
Resources
Legacy UI for Resources (Including UIv3 Services)
As LogicMonitor continues to phase out the legacy UI, the New UI Preview switch will be removed from Resources (which includes Services), making Resources and Services unavailable using the legacy UI, and available in the new UI only. The new UI provides an enhanced user experience, improved performance, and security features.
For more information about this deprecation, see End-of-Life (EOL) for UIv3 Resources (Including UIv3 Services) in LM Community.
If you have any questions or require assistance during this process, contact the Support team or your Customer Success Manager.
Synthetics
Deprecation for LM APM Synthetics (SYN)
LogicMonitor plans to transition synthetic monitoring capabilities from LM APM Synthetics (SYN) to our new product, Synthetics and Internet Performance Monitoring, which provides enhanced visibility, broader monitoring capabilities, and a modernized platform architecture.
LM APM Synthetics is built on a legacy Selenium-based architecture, while our new product, Synthetics and Internet Performance Monitoring, provides globally hosted monitoring, advanced waterfall analysis, filmstrips and playback for transaction troubleshooting, and expanded test coverage across browser, API, network, and internet performance monitoring workflows.
There is no immediate change required, and you can continue using LM APM Synthetics during the transition period, until it is fully deprecated.
For more information about this transition, including roadmap details and evaluation guidance, see Upcoming End of Life (EOL) for LM APM Synthetics (SYN) in LM Community.
If you have any questions or require assistance during this process, contact the Support team or your Customer Success Manager.
Collector
- EA Collector 40.600 was released on August 14, 2026. For more information, see EA Collector 40.600 Release Notes.
- EA Collector 40.500 was released on August 10, 2026. For more information, see EA Collector 40.500 Release Notes.
Container Monitoring Releases
End of Life (EOL) of Legacy LM Container and Argus Versions 5, 6, 7, and 8
As of July 31, 2026, LogicMonitor has removed support for legacy LM Container builds and Argus versions 5, 6, 7, and 8. These versions no longer receive updates or support.
You must upgrade to a supported LM Container release to receive current security and compliance updates, maintain compatibility with newer Kubernetes versions and container runtimes, and use actively maintained monitoring functionality.
For LM Container installations running Argus version 8, use the LM Upgrade Wizard or CLI to upgrade.
For more information about the removal, including timeline and further updates about the removal, see End-of-Life (EOL) for Legacy Versions 5, 6, 7, and 8 for LM Container & Argus is Complete in the LM Community.
If you have any questions or need assistance during the migration, contact the Support team or your Customer Success Manager.
LogicModule Releases
New and updated LogicModules are available for you directly in your LogicMonitor portal. You can install new modules from the Exchange and update existing modules in My Module Toolbox. For more information, see Modules Installation, and Modules Management in the product documentation.
This section lists the LogicModules that are new in this release, updated in this release, or will be removed in a future release. Changes related to the LogicModule feature will be listed in the General Updates section.
New LogicModules
| LogicModule Name | Details |
1 LogSource:IIS Server Logs | Added support for monitoring IIS server logs using the OpenTelemetry (OTel) Collector. |
1 DataSource:AWS_Connect_Resource | Added monitoring for AWS Connect instances. Metrics are polled every five minutes. |
1 ConfigSource:Citrix_Netscaler_FullBackup_Batch | Added a batch script for NetScaler Full Backup to resolve intermittent configuration fetch failures caused by multiple SSH attempts when retrieving individual files. |
Updated LogicModules
| LogicModule Name | Details |
3 DataSources:PaloAlto_Prisma_SDWAN_EdgeHealthPaloAlto_Prisma_SDWAN_EdgePerformancePaloAlto_Prisma_SDWAN_Underlay | Set the maximum major version to v3 for the system metrics and elements endpoints. |
1 PropertySource:addCategory_Cisco_UCSX_Device | Added support for a generic user label for UCSX Fabric Interconnect resources. |
1 DataSource:SNMP_Network_Interfaces | Fixed an issue where status alerting did not respect the optional interface.wildalias.alert_enable property. |
4 DataSources:PaloAlto_Prisma_SDWAN_EdgeHealthPaloAlto_Prisma_SDWAN_EdgePerformancePaloAlto_Prisma_SDWAN_OverlayPaloAlto_Prisma_SDWAN_Underlay1 PropertySource: addCategory_PaloAlto_PrismaSDWAN1 TopologySource: PaloAlto_PrismaSDWAN_Topology | Palo Alto Prisma SD-WAN modules now select API endpoint versions numerically and only within supported major versions, preventing newly published API versions from being adopted automatically. |
1 DataSource:OSPF_Neighbors | Added support for properly processing multiple SNMPv3 Context Names during Active Discovery. |
1 DataSource:Cato_SDWAN_API | Added a space after accountID in GraphQL. |
1 DataSource:SNMP_Host_Uptime | Added a minimum value of 0 and a maximum value of 1000 for UptimeAlert to prevent invalid alerts caused by counter wrapping. |
2 ConfigSources:Direct_DynamicDirect_Standard | Added exception handling for failed connection attempts. |
1 PropertySource:VMware_vSphere_Info | Resolved an issue where vCenter version properties were not updated correctly after upgrades due to a stale cached object reference. |
1 PropertySource:Juniper_VirtualChassis_Info | Added support for emitting auto.endpoint.serial_number to improve integration with other platform features. |
2 DataSources:SSL_Certificate_ChainsSSL_Certificates | Added support for SNI SSL monitoring. |
1 DataSource:Veeam_VBR_License_Health1 PropertySource: addCategory_Veeam_VBR | Updated to support use with a read-only-compatible Veeam role. Previously, categorization effectively required a Veeam Backup Administrator role because addCategory_Veeam_VBR depended on /api/v1/serverInfo. Descriptions have been updated to clarify read-only support and note that Veeam_VBR_License_Health still requires Veeam Backup Administrator access because Veeam restricts /api/v1/license. |
1 DataSource:Cisco_Nexus_Line_Card_Status | Removed the discovery filter to ensure all installed line cards and supervisor modules are reported on affected chassis. |
4 PropertySources:ConfigCheck_1_SFTPConfigCheck_2_SCPConfigCheck_3_ExecConfig_Cisco_Generic | Added support for forcing SSH Interactive mode for Cisco Adaptive Security Appliance version 9.19 and later. |
11 DataSources:Nutanix_Hypervisor_CPUNutanix_Hypervisor_ControllerPerformanceNutanix_Hypervisor_MemoryNutanix_Hypervisor_NodeHealthNutanix_Hypervisor_StorageNutanix_PrismCentral_ClustersNutanix_PrismCentral_DisksNutanix_PrismCentral_HostsNutanix_PrismCentral_StorageContainersNutanix_PrismCentral_VMsNutanix_PrismCentral_VolumeGroups | Added a five-second buffer to Nutanix API poll timestamps to prevent failures caused by clock skew. |
1 TopologySource:Cisco_Catalyst_SDWAN_Topology | Fixed tokenization for public-internet source and destination IP parsing for tunnels. |
2 DataSources:Ruckus_One_AP_RadiosRuckus_One_AP_SSIDs | Updated to replace Groovy null-safe map access syntax unsupported by older LogicMonitor Collector versions. |
11 DataSources:PureStorage_ArrayControllersPureStorage_ArrayPerformancePureStorage_ArrayUtilizationPureStorage_ComponentStatusPureStorage_DrivesPureStorage_PerformancePureStorage_TemperaturesPureStorage_TroubleshooterPureStorage_VolumePerformancePureStorage_VolumePerformance_API_v1_4PureStorage_VolumeUtilization4 PropertySources: PureStorage_API_VersionsPureStorage_ArrayInfoaddCategory_PureStorageaddERI_PureStorage1 TopologySource: PureStorage_Topology | Added recovery handling for expired or rejected sessions to prevent immediate failures and gaps in data collection. The suite was also refactored to use a shared PureStorage API snippet for common session and request handling. |
1 DataSource:LogicMonitor_Portal_Resources | Updated to distinguish between billable and non-billable resources. |
12 DataSources:Veeam_BackupAndReplication_BackupSessionsVeeam_BackupAndReplication_HyperVProxyServersVeeam_BackupAndReplication_Jobs_BackupsVeeam_BackupAndReplication_Jobs_ConfigBackupVeeam_BackupAndReplication_Jobs_CopyVeeam_BackupAndReplication_Jobs_ManagedAgentBackupsVeeam_BackupAndReplication_Jobs_SureBackupsVeeam_BackupAndReplication_Jobs_SyncVeeam_BackupAndReplication_Jobs_WindowsAgentVeeam_BackupAndReplication_RepositoriesVeeam_BackupAndReplication_ScaleOutRepositoriesVeeam_BackupAndReplication_VMwareProxyServers1 PropertySource: addCategory_Veeam_BackupAndReplication_PowerShell | Resolved a broken hostname check that passed the unresolved literal ##system.azure.privateIpAddress## to New-PSSession, resulting in false property assignment. |
1 PropertySource:addCategory_PowerMax | Merged Dell PowerMax inventory collection into addCategory_PowerMax. The module now collects Unisphere/API versions, multi-array identity, models, OS/microcode versions, serial numbers, management address, Dell manufacturer, and single-array endpoint properties while preserving existing categories and generic PowerMax properties. |


