Defining authentication credentials

Last Updated: 15 February, 2022

Using properties to set credentials

LogicMonitor may require credentials (for example, JDBC passwords, SNMP community strings, SSH username, and so on) in order to collect data from your devices. You can use properties to set this information at the global, group, or device level.

The level where you choose to set properties for your device may depend on how many devices that property applies to. For example, if you use the same SNMP community string for all Linux devices, you may want to set this property at the group level instead of at the device level for each individual Linux device in your account. For strategies and instructions on where and how to set properties, see Resource and Instance Properties.

Common credentials

The following table lists many predefined properties that can be used to store credentials (and authentication details) for various common protocols and systems.

Note: Any values assigned to properties with names ending in .pass .*password, .*credential, .auth, .key, or password will be obfuscated throughout the LogicMonitor interface for security purposes. In addition, values assigned to the following properties will also be obfuscated: snmp.community, snmp.privtoken, snmp.authtoken, aws.accesskey, (\\S+((\\.pass)|(\\.auth)|( .key))), azure .secretkey, (saas .(privatekey|secretkey)), gcp .serviceaccountkey, (collector\\.sqs .(awsaccesskey|awssecretkey)), and (gcccli.accesskey).

System credentials

In this section we have listed all the system credentials and their values. You may refer the notes for additional information about the property.

Citrix Xen*

Property NameValueNotes
xen.user
xen.pass
xen.url
The username, password, and url used to access your XenServer.For more information about configuring your Citrix XenServer, see Citrix XenServer.
xen.poolUsed to enable or disable discovery of the entire resource pool’s VMs rather than just the hypervisor’s current VMs.
xen.pool.concurrencyManages the maximum number of connections to the Xen pool master. This property defaults to 10.
xenapp.user
xenapp.pass
The username and password to access XenApp/XenDesktop.For more information on configuring Citrix XenApp/XenDesktop for monitoring, see Citrix XenApp/XenDesktop Monitoring.

Dell EMC

Property NameValueNotes
cim.user
cim.pass
cim.port
cim.ssl
The username, password, port, and SSL enablement status for EMC devices.

ESX Server

Property NameValueNotes
esx.user
esx.pass
esx.url
Username, password, and URL, if necessary, for accessing your ESX server.For more information on configuring your ESX server, see ESXi Servers and vCenter/vSphere Monitoring.

Mongo DB

Property NameValueNotes
mongodb.user
mongodb.pass
The username and password used to access for MongoDB database access.For more information about configuring your MongoDB, see MongoDB.

Navisphere

Property NameValueNotes
naviseccli.user
naviseccli.pass
The username and password used to access your Navisphere server.

NetApp

Property NameValueNotes
netapp.user
netapp.pass
The username & password used for accessing NetApp filers via the API.For more information on declaring netapp.api.port, netapp.ssl, and netapp.api.sslport, see NetApp FAS Monitoring.

Redis

Property NameValueNotes
redis.ports
redis.pass
The alternative ports and password for your Redis data store.For more information about configuring Redis, see Redis.

Protocol credentials

In this section we have listed all the protocol credentials and their values. You may refer the notes for additional information about the property.

HTTP

Property NameValueNotes
http.user
http.pass
http.port
The username, password, and port, if necessary, for the web page collection method.

IPMI

Property NameValueNotes
ipmi.user
ipmi.pass
The username and password used to access IPMI sensors and event logs.For more information about configuring IPMI, see IPMI Support.

JDBC

Property NameValueNotes
jdbc.mysql.user
jdbc.mysql.pass
dbname
The username, password, & database name to access MySQL.For more information about MySQL credentials, see MySQL Monitoring and Microsoft SQL Server Monitoring.
jdbc.oracle.user
jdbc.oracle.pass
The username & password to access Oracle.For more information on configuring access to Oracle, see Oracle Monitoring.
jdbc.mssql.user
jdbc.mssql.pass
dbname
The username, password & database name used for SQL server accessBy default, the SQLServerConnection- datasource uses integrated security, so it is not necessary to set these if the user the collector runs as has rights to query the database.
jdbc.db2.user
jdbc.db2.pass
dbname
The username, password & database name used for DB2 access

JMX

Property NameValueNotes
tomcat.jmxports
jmx.user
jmx.pass
The Tomcat JMX ports (comma separated), username and password for JMX access to your Tomcat server.For more information about configuring your Tomcat server, see Tomcat.
jmx.port
jmx.ports
jmx.user
jmx.pass
A singular port to monitor a JMX object, a list of ports (comma separated) to monitor multiple JMX objects, and the JMX username and password that should be used for authentication.

PDH

Property NameValueNotes
pdh.user
pdh.pass
The Windows username & password for remote perfmon access.Usually, these properties do not need to be defined because the wmi.user/wmi.pass properties will be used to access perfmon data. However, these may be needed if the WMI credentials include a domain\user, but the remote computer is in a different domain, and the user is local.

SNMP

Property NameValueNotes
snmp.communityThe SNMP community string for SNMP versions 1 and 2c (the default is public)See the Defining SNMP Credentials and Properties section of this support article.
snmp.securityThe username for SNMP version 3
snmp.auth
snmp.authToken
The authentication algorithm (default=”SHA”) and the secret token for authentication (similar to password) for SNMP v3 (SNMPv3). “MD5” is also supported for the snmp.auth property and, if you are running Collector version 28.606 or a higher numbered version, “SHA224”, “SHA256”, “SHA384”, and “SHA512” are additionally supported.
snmp.priv
snmp.privToken
The privacy algorithm (default=AES, DES is also supported), and the secret token for privacy (similar to password) for SNMPv3.AES128 and AES256 are supported out of the box.

For Collector versions 28.607 or greater, AES2563DES and AES1923DES are supported (usually for Cisco devices).
snmp.portThe UDP port for SNMP (defaults UDP 161).
snmp.contextName
snmp.contextEngineID
These properties identify the SNMP context (a collection of management information) associated with the SNMP device.

SSH

Property NameValueNotes
ssh.userSSH username. This property must be set on the Linux resource in LogicMonitor.For more information on configuring Linux-based system monitoring via SSH, see Linux (via SSH) Monitoring.
ssh.passSSH password. Only required if username and password are used to authenticate connection between LogicMonitor and the Linux resource. If a username and SSH key are being used instead of a password, set the ssh.cert property instead. This property must be set on the Linux resource in LogicMonitor.
ssh.certPath to the SSH key located on the Collector host (stored in a .pem or .pub file). Defaults to ~/.ssh/id_rsa if not set. LogicMonitor will attempt to use key-based authentication if configured, otherwise username and password will be used for authentication. This property must be set on the Linux resource in LogicMonitor.
ssh.portPort used for SSH connections. Defaults to port 22 if not set.
remotesession.ssh.portPopulate to override default SSH port value.For more information on using SSH to remotely access and operate on devices from within your LogicMonitor portal, see Remote Session.

Telnet

Property NameValueNotes
config.user
config.pass
The username and password to access Telnet.These properties are needed to monitor configsources via telnet. 

Some configsources such as Cisco_IOS and Fortigate_FortiOS require an additional property configsource.use.telnet  = TRUE on their respective devices to utilize the telnet protocol as this property is used as a boolean flag in the AD Code.

WMI

Property NameValueNotes
wmi.user
wmi.pass
The Windows username & password for remote WMI and PerfMon access.If the collector is running as a domain account with local admin privileges on the host to be monitored, this is not necessary.To specify a local user when running in a domain, use ##HOSTNAME##\administrator. For more information on configuring remote Windows host access, see Credentials for Accessing Remote Windows Computers.
wmi.authTypeThe NTLM protocol version used to authenticate to a remote WMI hostIf this property is not set, it defaults to a value of “NTLMv1”. Specify “NTLMv2” for authentication via NTLM version 2. A value of “Kerberos” is also supported; if “Kerberos” is assigned you should use the ServerName or FQDN to add device, and start your Collector services using AD account credentials instead of Local System. For more information on configuring remote WMI host access, see Credentials for Accessing Remote Windows Computers.

Defining SNMP credentials and properties

LogicMonitor can use SNMP versions 1, 2c or 3. If your device supports 2c, it supports 64-bit counters and is preferable over version 1. SNMPv3 adds authentication and encryption, making it more secure, but also more complicated to set up and troubleshoot.

Notes:

  • On an individual device, snmp.version is automatically set by LogicMonitor to the version of SNMP which responds. LogicMonitor attempts SNMP communication initially with version 3, then 2c, and finally version 1. The highest responding version is set for this value, and any attempts to edit it will automatically revert.
  • If you attempt to change the SNMP version after initial device addition (by entering new credentials), you must ensure it and the pertinent credentials function. If LogicMonitor is not able to communicate using the new version specified, it will automatically revert to the original version as a result of the failure.
  • If you want to override the default UDP 161 port, set snmp.port (defined in the table above) to reflect your SNMP port.

SNMP Versions 1 and 2c

For SNMP versions 1 and 2c, you need to set the snmp.community property (defined in the table above).

SNMP Version 3

For SNMPv3, to communicate with authentication and privacy (referred to as authPriv security level), you need to set the snmp.security, snmp.auth, snmp.authToken, snmp.priv, and snmp.privToken properties (all defined in the table above).

If communicating with authentication only (no privacy), referred to as authNoPriv, include the snmp.priv and snmp.privToken properties, but leave them blank.

SNMPv3 also introduces support for snmp.contextName and snmp.contextEngineID. The snmp.contextEngineID value is a string used to identify the device on which the management information is hosted. The snmp.contextName identifies the individual SNMP context.

In This Article