Skip to content

Add LogSource (LM Logs syslog ingestion) support to LogicModules namespace #12

@davidnmbond

Description

@davidnmbond

Problem

The \LogicMonitor.Api\ NuGet package does not include a \LogSource\ type for querying or managing LM Logs LogSource configurations (syslog ingestion rules).

The \LogicMonitor.Api.Logs\ namespace currently contains only \LogFilter, \LogItem, and audit types — these are for querying ingested log data, not for inspecting the ingestion rules themselves.

Evidence

Types present in v3.236.14, \LogicMonitor.Api.Logs\ namespace:

  • \LogFilter, \LogItem, \LogFilterSortOrder\ — log querying only
  • Audit types (\Audit, \AuditEvent, etc.) — unrelated

No \LogSource, \LogSourceFilter, or similar type exists anywhere in the package.

LogicMonitor REST API

LM Logs LogSources are accessible via the LM portal REST API at:

  • \GET /log/sources\ — list all LogSources
  • \GET /log/sources/{id}\ — get a single LogSource by ID

Key fields needed on a \LogSource\ type:

  • \id,
    ame, \ ype\
  • \�ppliesTo\ expression and/or \�pplyToCollector\ settings + collector mappings
  • Include filters
  • Log fields
  • Resource mappings
  • Enabled/disabled state

Use Case

During live incident triage (e.g. syslog packets arriving at a collector but not appearing in LM Logs), engineers need to inspect the LogSource \�ppliesTo\ expression, include filters, and resource mappings without making portal changes. Without a typed \LogSource\ in the SDK, only raw HTTP calls with manual HMAC signing are possible.

Requested Enhancement

Add a \LogSource\ class and surface it via the \LogicMonitorClient\ with at least:

  • \GetAllAsync()\ (list all)
  • \GetAsync(id)\ (get single)

Optionally also export/import JSON (as with DataSource, EventSource, etc.)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions