Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

SEM on Solaris non-global zone (where BSM cannot be activated)
SEM agent has been installed on a non-global zone (Java dependencies are satisfied). BSM cannot be activated on a Solaris non-global zone. Auditing/syslog is all configured and working fine. Machines are listed and the Connector has been configured in the Solar winds console but no events appear. Is this because Solar…
SolarWinds SEM - Security Filters
SolarWinds Security Filters Good Evening and Happy Sunday. I'm working with SEM and have basic setup from what I can tell. I have the following connectors deployed: Windows System, Windows Security, Windows Application, and Windows Active Response. Its prob also important to note that i don't have any rules setup yet but I…
Local Filter - Domain Admin Login/Authentication Failures
Hello, I am looking at creating this filter for domain admin login/authentication failures. the filter uses the failedauthentication.destinationaccount which points to my directory service group for builtin domain admins. it also uses the userlogonfailure.destinationaccount which also points to the same builtin domain…
Problem with emails and SourceMachine.
Hi there community, I got a strange problem that we cant solve: We got a user defined group Called "Legal Addresses" with a bunch of IP addresses. We have two rules, one for successfull logins to a switch made from an adress not in the "Legal addresses" list. If a successfull connection is made from an illegal address(not…
Device authentication failure
Dear All , I am new to solarwinds-sem, I had configured the Microsoft365 connector and I am getting many logon failure events with the reason:deviceauthenticationfailed , note that my organization has a hybrid environment. Has anyone else faced this ? Any ideas?
SEM to monitor audit logs from Fortigate Firewalls
Hi everyone. Does anyone here was able to monitor via SEM the audit logs from Fortigate Firewalls like when creating, editing, or deleting firewall policies? Can you share the configurations you have performed. Thank you in advance!
SEM can't receive logs from FortiAnalyzer FAZ-300G
Does anyone here configured their FortiAnalyzer to send logs to SEM? Is there any other configuration required in FortiAnalyzer? I tried sending test logs from FAZ and can't receive any logs when checking it via checklogs in SEM. Hoping someone can help me. Thank you!
CMC No Logging? Really?
Anybody ever wonder why SEM has an administrative account CMC that doesn't log when it's used and you can't alert off of it? Do you run any product, let alone a security product, that doesn't log logon or logoff events either success or failure on all accounts, especially administrative accounts? After allowing all of us…
Where can I get a list of all error codes on log & event manager reports?
Hi all, I get 4XX errors when I run log & event manager reports with SEM. Where can I get a list of all error codes? With them, I can troubleshoot the issues. Thank you.
Question about supported SEM connectors
Hi guys, I am a new user and I have a client who wants to add some products in the LEM software: 1. Access Point Aruba 505 2. HPE OfficeConnect Switch 1920S 48G 4SFP PPoE+ (370W) JL386A 3. HPE 1920-48G-PoE+ (370W) 4. NAS synology (DS1817 & DS2020+) 5. HP MSA 2062 UPS Efacec Agile Plus RT II 6-10kVA Printers: SHARP MX2614…