| Deployment model | Customer-controlled Linux Core, one Universal Sensor software with Network, Infrastructure, Flow and Log roles, and Windows/Linux host Agents. Automatic Sensor selection, distributed pools and two-Core Active/Standby HA support the deployment. | Hosted platform with local collectors and API-based cloud collection. Documented · Source 1 ↗ Source 2 ↗ |
| Network / SNMP | Discovery, SNMP device/interface health, routing neighbors, overlays, network services, active paths and topology. Connect control-plane state, interface quality, service reachability and recent changes. | Network/device monitoring with collector-based discovery and polling. Documented · Source 1 ↗ Source 2 ↗ |
| Flow analytics | NetFlow, IPFIX and sFlow ingestion with exporter, interface, application and site context. Traffic trends, conversations, top talkers and sampling quality feed investigation and capacity planning. | NetFlow/traffic monitoring with plan and capacity scope. Edition specific · Source 1 ↗ Source 2 ↗ |
| Log monitoring / analytics | Syslog, structured logs and operational events with search, parsing, source identity and incident context. Connect logs to metrics, topology, flow and configuration changes under access and retention policies. | LM Logs supports collector/API ingestion, searchable logs and syslog, Windows and Kubernetes event sources; confirm package and retention scope. Scope dependent · Source 1 ↗ Source 2 ↗ |
| OpenTelemetry / OTLP | Governed OTLP metrics, logs and bounded span evidence with resource identity, search and dependency context. Apply telemetry budgets, privacy rules and retention. The focus is operational observability across the estate. | Standard OTLP ingestion for metrics, logs and traces using existing OpenTelemetry collectors or LogicMonitor's collector; confirm signal entitlements and configuration. Documented · Source 1 ↗ |
| Packet visibility / DPI | Bounded, incident-triggered packet evidence supports focused network diagnosis. Capture is governed by scope, duration, resource and privacy controls; it is not an always-on full-DPI platform. | Traffic-flow visibility is documented; general DPI/packet equivalence is not established. Not verified · Source 1 ↗ |
| Network configuration | Separate AmrudAi NCM product: backup, version history, semantic diff, drift, golden-state and policy checks, controlled CLI, staged/canary execution and firmware workflows. Approval, pre/post-checks, audit and adapter-supported rollback keep privileged changes under control. | LM Config monitors/stores configuration, detects changes and documents restore; validate device workflows. Edition specific · Source 1 ↗ Source 2 ↗ |
| IP address management | Prefix/subnet hierarchy, discovery reconciliation, address history, conflicts, DNS/DHCP context and utilization planning. Keep address identity and changes connected to the monitored inventory. | Authoritative IPAM allocation/lifecycle functionality was not established. Not verified · Source 1 ↗ |
| Infrastructure / cloud / Kubernetes | Host, endpoint, virtualization, storage/SAN, cloud-resource/network and Kubernetes monitoring. Connect Windows/Linux Agents and agentless collection with account, region, workload and dependency context. | Hybrid infrastructure and cloud API monitoring; validate technology-specific modules. Documented · Source 1 ↗ Source 2 ↗ |
| Applications / databases | Database availability, sessions, waits/blocking, replication, query-change evidence and synthetic service checks. Connect database, host, storage and network prerequisites to service behavior; developer profiling and RUM are separate categories. | Technology-specific monitoring modules and service insights; exact APM/DB depth needs validation. Scope dependent · Source 1 ↗ Source 2 ↗ |
| AI investigation / root cause | Evidence-led RCA, learned correlation, adaptive baselines, graph-based context and AI Copilot assistance. Show competing hypotheses, supporting and contradictory evidence, next checks and human control over privileged actions. | Edwin AI event intelligence/investigation and automation; package/add-on entitlements differ. Edition specific · Source 1 ↗ |
| Alerting / response | Telemetry trust, semantic health states, persistence/flapping controls, maintenance context, event grouping and contextual notifications. Cross-region and multi-vantage Sensor qualification distinguish local paths, collector faults and service impact. | Metric/configuration alerts and diagnostic/remediation capabilities by package. Edition specific · Source 1 ↗ Source 2 ↗ |
| Topology / dependencies | Temporal topology and service dependencies connect entities, paths, workloads, change history and business services. Reconstruct incident-time relationships and distinguish lost redundancy from actual service outage. | TopologySources and dynamic service/topology views. Documented · Source 1 ↗ Source 2 ↗ |
| MSP / tenant model | Shared multitenant and dedicated customer deployment models with tenant boundaries and provider workflows. Customer-specific access, branding, Sensors, service commitments, reports and HA support managed operations. | Explicit multi-tenant MSP offering with client isolation, permissions and branding. Documented · Source 1 ↗ |
| Disconnected operation | Customer-managed deployment, offline packaging and deterministic monitoring/investigation without a mandatory hosted LLM. Optional external connectors and hosted AI services use connectivity according to your policy. | Collector presence does not make the cloud service an offline self-hosted platform. Scope dependent · Source 1 ↗ |
| Extensibility | Capability Packs, MIB/API Studio, open telemetry, ITSM/CMDB, webhooks and service workflow integrations. Versioned connectors, identity reconciliation, approval boundaries and audit keep integrations accountable. | LogicModules, ConfigSources, TopologySources and custom scripts. Documented · Source 1 ↗ Source 2 ↗ |
| Commercial model | Scope-based enterprise and MSP proposals covering the monitored estate, deployment, telemetry and support. Request a written proposal for entitlements, retention, services and commercial terms; no unverified price or savings is assumed. | Hybrid Unit packages plus capability/retention/add-ons; MSP agreements may use other pricing. Documented · Source 1 ↗ |