Log Query Pack Overview

A Log Query Pack is a LogicModule type that contains multiple official saved log queries in a single, versioned module. Multiple Log Query Packs can be grouped into a package. For example, a Cisco IO pack can contain CPU, interface, and BGP queries, while a Palo Alto pack can contain firewall session and threat-related queries. Both packs can be grouped into a Network Monitoring package.

Log Query Packs provide predefined saved queries that you can import into LogicMonitor to analyze logs without creating queries from scratch.

You can manually import Log Query Packs from Exchange, or LogicMonitor can automatically import them when a new company is created. For more information, see [Log Query Pack Configuration](<link to new article>).

The Log Query Pack provides the following benefits:

• Versioning—Each module carries a semantic version, checksum, and lineage through the LM Registry.
• Supportability—LogicMonitor publishes and updates query packs without per-tenant manual setup.
• Consistency—Query packs follow the same pattern as DataSources, LogSources, and other LogicModules.
• New onboarding—Query packs import automatically during company creation, providing predefined queries for immediate use.

General Requirements for Log Query Pack

To use Log Query Pack, you need the following:

• A LogicMonitor user with Manage permission for “My Module Toolbox” for Module role permissions.
• A LogicMonitor user with Manage permission for “Public Query Groups” for Logs and Traces role permissions.
• Your account includes an Logs Inspector license.