Release Note

v.244 Release Notes

Feature Highlights

  • Resource Association for Log Tracked Queries
  • Complex Filtering for Syslog and SNMP Traps LogSource Configuration
  • Advanced Cloud Provider Health Event Timeline Visualization

Monitoring Updates

  • Fortinet_FortiGate_HighAvailabilityPeers Deprecated and Replaced by Fortinet_FortiGate_HAPeers
  • Enhanced Cisco UCS-X NetScan
  • Enhanced paloalto.prismasdwan Snippet

Dashboards

Enhancement

LMQL aggr_over_time Support for percentile_over_time Rollups

You can now include percentile_over_time:N rollups in the aggr_over_time function in LogicMonitor Query Language (LMQL), alongside existing rollups such as avg_over_time, max_over_time, and sum_over_time. This enhancement provides greater flexibility when querying and reporting percentile values with other over-time aggregations.

You can specify an integer percentile value from 0 through 100, such as percentile_over_time:95 or percentile_over_time:40. When you specify multiple rollups, the API returns a separate result for each rollup and matching instance or datapoint. The Function field identifies the rollup associated with each result, including individual percentile values.

Note: Existing aggr_over_time queries without percentile rollups and standalone percentile_over_time( < query>, N) queries are unchanged.

To access this functionality, navigate to Dashboards > create an Advanced Metrics widget. Use percentile_over_time:N in the aggr_over_time function in the Query Builder. Alternatively, you can manually enter the queries using raw query.

For more information, see LogicMonitor Query Language (LMQL) Reference in the product documentation.

Enhancement

Dashboard Refresh for On-Demand Widget Data Updates

You can now refresh applicable widgets on the current dashboard on demand without performing a full browser refresh. The Refresh icon displays next to Dashboard Time and refreshes the dashboard widgets with the latest data while preserving your current dashboard context.

Note: Dashboard refresh is separate from widget-level auto-refresh. Widget-level auto-refresh continues to control recurring refresh behavior for individual widgets.

To access this feature, navigate to a dashboard and select the Refresh icon.

For more information, see Dashboards Management in the product documentation.

Enhancement

NOC Widget OK Status Filter

You can now use an OK alert status in the NOC widget configuration. This setting is enabled by default.

When you disable the toggle, the widget excludes healthy resources and displays resources that match the remaining enabled statuses.

Note: This enhancement affects only resource visibility in the NOC widget. It does not change alert generation, resource state, or alert severity.

To access this feature, navigate to the NOC widget configuration and toggle OK in the Alert Statuses to Display settings.

For more information, see NOC Widget in the product documentation.

Enhancement

Advanced Cloud Provider Health Event Timeline Visualization

You can now display Cloud Provider Health Events as a timeline visualization within the Cloud Provider Health Widget. You can display timeline data using vertical or horizontal options. This enhancement provides context to cloud health events, enabling you identify trends and potential downstream issues in your cloud environments.

For more information, see Cloud Provider Health Event Widgets in the product documentation.

LM Logs

Enhancement

IIS Server Logs

You can now monitor Microsoft Internet Information Services (IIS) access logs by using the OpenTelemetry (OTel) Collector. The IIS Server Logs LogSource simplifies IIS log onboarding by automatically collecting and parsing IIS access logs into structured metadata for querying, alerting, and dashboarding. It supports standard IIS log locations and extracts commonly used IIS fields to accelerate troubleshooting and operational visibility.

You must use the OpenTelemetry (OTel) Collector for Windows version 7.0.00 or later.

To access this feature, navigate to Logs > Modules > Exchange and add the IIS Server Logs LogSource.

Enhancement

Resource Association for Log Tracked Queries

You can now associate a tracked query with an existing LogicMonitor resource when tracking a query. This enhancement enables tracked query instances to be created under the selected resource instead of a default resource, providing better visibility and easier navigation from the associated resource.

To access this feature, navigate to Logs > Manage Saved Views, select a saved query, and then select Track query.

For more information, see Log Query Tracking and Tracked Query Management in the product documentation.

Enhancement

Complex Filtering for Syslog and SNMP Traps LogSource Configuration

You can now define Syslog and SNMP Trap LogSource filters by using a single free-text complex filter query instead of configuring legacy filters one row at a time. Complex filters support multiple filter predicates combined with AND, OR, and parentheses, enabling you to create more flexible and expressive filtering logic. Only log messages or SNMP traps that match the configured complex filter are ingested.

Note: For Syslog LogSources, when complex filtering is enabled, the standard AND and OR filter options are not available.
To use complex filtering, you need the following:
  • You must use EA Collector 40.700 or later to configure complex filtering for Syslog and SNMP Traps LogSources.

  • A complex filter can contain up to 100 predicates.

  • Only valid attribute, operator, and value combinations are accepted for each LogSource type.

  • For SNMP Trap LogSources, when filtering on VarBindValue, pair it with the corresponding VarBindKey.

To access this feature, navigate to Modules > My Module Toolbox > Add a Syslog or SNMP Trap LogSource and enable the Use complex filter toggle.

For more information about using complex filtering, see Syslog LogSource Configuration and SNMP Traps LogSource Configuration in the product documentation.

Modules

Enhancement

Enhanced paloalto.prismasdwan Snippet

The enhanced paloalto.prismasdwan snippet improves collection reliability when the Prisma SD-WAN API reaches its rate limit. The snippet now retries rate-limited requests using exponential backoff and honors the Retry-After response header.

The snippet also reduces API requests by caching configuration responses and access tokens by tenant service group. It excludes inactive, disconnected, or unassigned elements from metric collection and removes literal “null” values from topology External Resource IDs (ERIs).

For more information, see Palo Alto Prisma SD-WAN Monitoring in the product documentation.

Enhancement

Enhanced lm.data.topo Snippet

The enhanced lm.data.topo snippet improves external resource type (ERT) assignment when generating topology data. Linux resources are more accurately matched to the PhysicalServer ERT, Sophos XG firewalls are matched to the Firewall ERT, and ArubaCX Switches receive improved ERT assignment.

In addition, the Cisco ASA matching pattern is more specific. Linux resources with “ASA” in their system information are correctly classified, reducing incorrectly classified resources in your topology maps.

Enhancement

Enhanced Cisco UCS-X NetScan

The enhanced Cisco UCS-X NetScan now assigns the cisco.intersight.serial property to all discovered chassis, server, and fabric interconnect resources. You can use this consistent property to identify and filter Cisco UCS-X resources during onboarding.

For more information, see Cisco UCS-X Series Monitoring in the product documentation.

Deprecation

Fortinet_FortiGate_HighAvailabilityPeers Deprecated and Replaced by Fortinet_FortiGate_HAPeers

The Fortinet_FortiGate_HighAvailabilityPeers module is deprecated and replaced by Fortinet_FortiGate_HAPeers. The new module adds support for filtering standalone resources to prevent duplicate alerts and unnecessary instance creation.

You can retain historical data and use standalone-resource filtering by disabling monitoring for the existing Fortinet_FortiGate_HighAvailabilityPeers module and importing the Fortinet_FortiGate_HAPeers module.

Important: Do not use both modules to monitor the same resource. Doing so results in duplicate monitoring. Follow your organization’s established change control processes when transitioning to Fortinet_FortiGate_HAPeers.
For information on disabling datasources, see Disabling Monitoring for a DataSource or Instance in the product documentation.
Deprecation

Apache Groovy 2 Support Removal and Replaced with Apache Groovy 4 Support for all LogicMonitor-Provided LogicModules

In a future release, LogicMonitor Collectors will no longer support Apache Groovy 2. All official LogicMonitor-provided modules are compatible with Apache Groovy 4. To support this migration, LogicMonitor released updates to official LogicModules to be compatible with Groovy 4.

As a result of this migration, you must do the following:

  • Validate any customized or community-provided modules to ensure compatibility
    For more information about validating your customized modules, see Custom Module Groovy Migration Validation in the product documentation.
  • Install a module update for LogicMonitor-provided modules that have compatibility changes released.
    For more information, see LogicMonitor Provided Modules Groovy 4 Migration in the product documentation.
  • Update Enhanced Script NetScans to Groovy 4 compatible scripts.
    For more information, see “Enhanced Script NetScans Now Groovy 4 Compatible” in the Modules section of the Release Notes.

For more information on the timeline of this migration, see Apache Groovy 2 End-of-Life Milestone Public Announcement.

The GD Collector 39.004 now uses Groovy 4 instead of Groovy 2.

Known Issue

In Apache Groovy 4, the behavior of the push() method for the List class is reversed. In Apache Groovy 2.4, the push() method would add an item to the list, in Apache Groovy 4 push() will work on the first item of a List.

// v4 Behavior
def numbers = [1, 2, 3, 4]
numbers.push(5)
println numbers 
// OUTPUT: [5, 1, 2, 3, 4] 
// v2.4 Behavior
def numbers = [1, 2, 3, 4]
numbers.push(5)
println numbers 
// OUTPUT: [1, 2, 3, 4, 5]

To mitigate this issue, migrate to using add() in place of push():

def numbers = [1, 2, 3, 4]
numbers.add("5")
println numbers 
// OUTPUT: [1, 2, 3, 4, 5]

When running a module using Apache Groovy 4, the behavior of the pop() method is reversed. In Apache Groovy 2.4 the pop() behavior would remove the last item in a list, in Groovy 4 pop() will remove the first item in a list.
// v4 Behavior
def numbers = [1, 2, 3, 4]
println numbers.pop() 
// OUTPUT: 1
// v2.4 Behavior
def numbers = [1, 2, 3, 4]
println numbers.pop() 
// OUTPUT: 4

To mitigate this issue, migrate to using remove() in place of pop():

def numbers = [1, 2, 3, 4]
println numbers.remove(numbers.size() - 1) 
// OUTPUT: 4

Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules.
Known Issue

When running a module using Apache Groovy 4, and the module includes an invalid type parameter for a data structure, the module throws the following exception:

java.lang.RuntimeException: org.codehaus.groovy.control.MultipleCompilationErrorsException: startup failed:

Important: LogicMonitor is releasing updates to LogicModules to mitigate this issue for official LogicMonitor-provided modules.

 

Reports

Enhancement

LMQL aggr_over_time Support for percentile_over_time Rollups

You can now include percentile_over_time:N rollups in the aggr_over_time function in LogicMonitor Query Language (LMQL), alongside existing rollups such as avg_over_time, max_over_time, and sum_over_time. This enhancement provides greater flexibility when querying and reporting percentile values with other over-time aggregations.

You can specify an integer percentile value from 0 through 100, such as percentile_over_time:95 or percentile_over_time:40. When you specify multiple rollups, the API returns a separate result for each rollup and matching instance or datapoint. The Function field identifies the rollup associated with each result, including individual percentile values.

Note: Existing aggr_over_time queries without percentile rollups and standalone percentile_over_time(, N) queries are unchanged.

To access this functionality, navigate to Reports > create a Metrics Explorer report. Use percentile_over_time:N in the aggr_over_time function in the Query Builder. Alternatively, you can manually enter the queries using raw query.

For more information, see LogicMonitor Query Language (LMQL) Reference in the product documentation.

Resources

Deprecation

Legacy UI for Resources (Including UIv3 Services)

As LogicMonitor continues to phase out the legacy UI, the New UI Preview switch will be removed from Resources (which includes Services), making Resources and Services unavailable using the legacy UI, and available in the new UI only. The new UI provides an enhanced user experience, improved performance, and security features.

Recommendation: To ensure a smooth transition, navigate to Resources, and then toggle on the New UI Preview switch to explore UIv4, and take advantage of its latest features and enhancements. When enabled, a Services icon appears as a standalone icon in the navigation menu.

For more information about this deprecation, see End-of-Life (EOL) for UIv3 Resources (Including UIv3 Services) in LM Community.

If you have any questions or require assistance during this process, contact the Support team or your Customer Success Manager.

 

Synthetics

Deprecation

Deprecation for LM APM Synthetics (SYN)

LogicMonitor plans to transition synthetic monitoring capabilities from LM APM Synthetics (SYN) to our new product, Synthetics and Internet Performance Monitoring, which provides enhanced visibility, broader monitoring capabilities, and a modernized platform architecture.

LM APM Synthetics is built on a legacy Selenium-based architecture, while our new product, Synthetics and Internet Performance Monitoring, provides globally hosted monitoring, advanced waterfall analysis, filmstrips and playback for transaction troubleshooting, and expanded test coverage across browser, API, network, and internet performance monitoring workflows.

There is no immediate change required, and you can continue using LM APM Synthetics during the transition period, until it is fully deprecated.

Recommendation: To prepare for this deprecation, begin evaluating and planning for your transition to Synthetics and Internet Performance Monitoring.

For more information about this transition, including roadmap details and evaluation guidance, see Upcoming End of Life (EOL) for LM APM Synthetics (SYN) in LM Community.

If you have any questions or require assistance during this process, contact the Support team or your Customer Success Manager.

Collector

  • EA Collector 40.600 was released on August 14, 2026. For more information, see EA Collector 40.600 Release Notes.
  • EA Collector 40.500 was released on August 10, 2026. For more information, see EA Collector 40.500 Release Notes.

Container Monitoring Releases

Removal

End of Life (EOL) of Legacy LM Container and Argus Versions 5, 6, 7, and 8

As of July 31, 2026, LogicMonitor has removed support for legacy LM Container builds and Argus versions 5, 6, 7, and 8. These versions no longer receive updates or support.

You must upgrade to a supported LM Container release to receive current security and compliance updates, maintain compatibility with newer Kubernetes versions and container runtimes, and use actively maintained monitoring functionality.

Note: This removal does not affect SKUs or pricing. Upgrading does not result in a loss of existing monitoring capabilities.

For LM Container installations running Argus version 8, use the LM Upgrade Wizard or CLI to upgrade.

Recommendation: If you are running Argus version 7 or earlier, you must migrate the deployment to LM Container before upgrading. You can migrate existing Kubernetes cluster configurations either using Helm or without Helm. For more information, see Migrating Existing Configurations Using Helm and Migrating Existing Configuration Without Using Helm in the product documentation.

For more information about the removal, including timeline and further updates about the removal, see End-of-Life (EOL) for Legacy Versions 5, 6, 7, and 8 for LM Container & Argus is Complete in the LM Community.

If you have any questions or need assistance during the migration, contact the Support team or your Customer Success Manager.

LogicModule Releases

New and updated LogicModules are available for you directly in your LogicMonitor portal. You can install new modules from the Exchange and update existing modules in My Module Toolbox. For more information, see Modules Installation, and Modules Management in the product documentation.

This section lists the LogicModules that are new in this release, updated in this release, or will be removed in a future release. Changes related to the LogicModule feature will be listed in the General Updates section.

New LogicModules

LogicModule NameDetails
1 LogSource:
IIS Server Logs
Added support for monitoring IIS server logs using the OpenTelemetry (OTel) Collector.
1 DataSource:
AWS_Connect_Resource
Added monitoring for AWS Connect instances. Metrics are polled every five minutes.
1 ConfigSource:
Citrix_Netscaler_FullBackup_Batch
Added a batch script for NetScaler Full Backup to resolve intermittent configuration fetch failures caused by multiple SSH attempts when retrieving individual files.

Updated LogicModules

LogicModule NameDetails
3 DataSources:
PaloAlto_Prisma_SDWAN_EdgeHealth
PaloAlto_Prisma_SDWAN_EdgePerformance
PaloAlto_Prisma_SDWAN_Underlay
Set the maximum major version to v3 for the system metrics and elements endpoints.
1 PropertySource:
addCategory_Cisco_UCSX_Device
Added support for a generic user label for UCSX Fabric Interconnect resources.
1 DataSource:
SNMP_Network_Interfaces
Fixed an issue where status alerting did not respect the optional interface.wildalias.alert_enable property.
4 DataSources:
PaloAlto_Prisma_SDWAN_EdgeHealth
PaloAlto_Prisma_SDWAN_EdgePerformance
PaloAlto_Prisma_SDWAN_Overlay
PaloAlto_Prisma_SDWAN_Underlay

1 PropertySource:
addCategory_PaloAlto_PrismaSDWAN

1 TopologySource:
PaloAlto_PrismaSDWAN_Topology
Palo Alto Prisma SD-WAN modules now select API endpoint versions numerically and only within supported major versions, preventing newly published API versions from being adopted automatically.
1 DataSource:
OSPF_Neighbors
Added support for properly processing multiple SNMPv3 Context Names during Active Discovery.
1 DataSource:
Cato_SDWAN_API
Added a space after accountID in GraphQL.
1 DataSource:
SNMP_Host_Uptime
Added a minimum value of 0 and a maximum value of 1000 for UptimeAlert to prevent invalid alerts caused by counter wrapping.
2 ConfigSources:
Direct_DynamicDirect_Standard
Added exception handling for failed connection attempts.
1 PropertySource:
VMware_vSphere_Info
Resolved an issue where vCenter version properties were not updated correctly after upgrades due to a stale cached object reference.
1 PropertySource:
Juniper_VirtualChassis_Info
Added support for emitting auto.endpoint.serial_number to improve integration with other platform features.
2 DataSources:
SSL_Certificate_ChainsSSL_Certificates
Added support for SNI SSL monitoring.
1 DataSource:
Veeam_VBR_License_Health

1 PropertySource:
addCategory_Veeam_VBR
Updated to support use with a read-only-compatible Veeam role. Previously, categorization effectively required a Veeam Backup Administrator role because addCategory_Veeam_VBR depended on /api/v1/serverInfo. Descriptions have been updated to clarify read-only support and note that Veeam_VBR_License_Health still requires Veeam Backup Administrator access because Veeam restricts /api/v1/license.
1 DataSource:
Cisco_Nexus_Line_Card_Status
Removed the discovery filter to ensure all installed line cards and supervisor modules are reported on affected chassis.
4 PropertySources:
ConfigCheck_1_SFTP
ConfigCheck_2_SCP
ConfigCheck_3_Exec
Config_Cisco_Generic
Added support for forcing SSH Interactive mode for Cisco Adaptive Security Appliance version 9.19 and later.
11 DataSources:
Nutanix_Hypervisor_CPU
Nutanix_Hypervisor_ControllerPerformance
Nutanix_Hypervisor_Memory
Nutanix_Hypervisor_NodeHealth
Nutanix_Hypervisor_Storage
Nutanix_PrismCentral_Clusters
Nutanix_PrismCentral_Disks
Nutanix_PrismCentral_Hosts
Nutanix_PrismCentral_StorageContainers
Nutanix_PrismCentral_VMs
Nutanix_PrismCentral_VolumeGroups
Added a five-second buffer to Nutanix API poll timestamps to prevent failures caused by clock skew.
1 TopologySource:
Cisco_Catalyst_SDWAN_Topology
Fixed tokenization for public-internet source and destination IP parsing for tunnels.
2 DataSources:
Ruckus_One_AP_Radios
Ruckus_One_AP_SSIDs
Updated to replace Groovy null-safe map access syntax unsupported by older LogicMonitor Collector versions.
11 DataSources:
PureStorage_ArrayControllers
PureStorage_ArrayPerformance
PureStorage_ArrayUtilization
PureStorage_ComponentStatus
PureStorage_Drives
PureStorage_Performance
PureStorage_Temperatures
PureStorage_Troubleshooter
PureStorage_VolumePerformance
PureStorage_VolumePerformance_API_v1_4
PureStorage_VolumeUtilization

4 PropertySources:
PureStorage_API_Versions
PureStorage_ArrayInfoaddCategory_
PureStorageaddERI_
PureStorage

1 TopologySource:
PureStorage_Topology
Added recovery handling for expired or rejected sessions to prevent immediate failures and gaps in data collection. The suite was also refactored to use a shared PureStorage API snippet for common session and request handling.
1 DataSource:
LogicMonitor_Portal_Resources
Updated to distinguish between billable and non-billable resources.
12 DataSources:
Veeam_BackupAndReplication_BackupSessions
Veeam_BackupAndReplication_HyperVProxyServers
Veeam_BackupAndReplication_Jobs_Backups
Veeam_BackupAndReplication_Jobs_ConfigBackup
Veeam_BackupAndReplication_Jobs_Copy
Veeam_BackupAndReplication_Jobs_ManagedAgentBackups
Veeam_BackupAndReplication_Jobs_SureBackups
Veeam_BackupAndReplication_Jobs_Sync
Veeam_BackupAndReplication_Jobs_WindowsAgent
Veeam_BackupAndReplication_Repositories
Veeam_BackupAndReplication_ScaleOutRepositories
Veeam_BackupAndReplication_VMwareProxyServers

1 PropertySource:
addCategory_Veeam_BackupAndReplication_PowerShell
Resolved a broken hostname check that passed the unresolved literal ##system.azure.privateIpAddress## to New-PSSession, resulting in false property assignment.
1 PropertySource:
addCategory_PowerMax
Merged Dell PowerMax inventory collection into addCategory_PowerMax. The module now collects Unisphere/API versions, multi-array identity, models, OS/microcode versions, serial numbers, management address, Dell manufacturer, and single-array endpoint properties while preserving existing categories and generic PowerMax properties.