nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

How can I remove an user from a user-defined-group 3 months after the user account creation?
Hello community, I am starting to learn SEM's basics and am finding my way through. However for my organization I need to implement a rule (or response action) to remove an user from an user-defined group, 3 months after that user was created (and has been active) I can't seem to make this work, does anyone know a way…
SEM stops sending emails on rule trigger
I've got a run to send an email for EventType = UserEnable. We get around 120 of these a day, so it acts as a decent flag as to whether email alerts are working. What's happening is around once a week SEM stops sending emails at all until I restart the manager via a PuTTY session. Once I do this all is well again. We're on…
Is there any easy way to create filters and auto share them with other users?
Hi, I wonder if there is an easy way to create filters and share them with every user in the SEM web interface. Or is export/import the only way?
Increase session timeout for SEM 2022.2.2 Web Interface?
We're using SolarWinds SEM product ver. 2022.2.2 - How do I increase the session timeout for the web interface? I'm getting kicked out quite frequently.
Solar Winds SEM on Solaris 10
I am confused by the Solaris SEM agent install documentation; SEM Agent v2022.2 is supported on Solaris 10 onwards according to the requirements/release notes. The Java dependency is either Java 11 or Java 16. The last Official Java available for Solaris 10 is Java 8. So Solar winds agent 2022.2 can only be supported on…
SEM on Solaris non-global zone (where BSM cannot be activated)
SEM agent has been installed on a non-global zone (Java dependencies are satisfied). BSM cannot be activated on a Solaris non-global zone. Auditing/syslog is all configured and working fine. Machines are listed and the Connector has been configured in the Solar winds console but no events appear. Is this because Solar…
SolarWinds SEM - Security Filters
SolarWinds Security Filters Good Evening and Happy Sunday. I'm working with SEM and have basic setup from what I can tell. I have the following connectors deployed: Windows System, Windows Security, Windows Application, and Windows Active Response. Its prob also important to note that i don't have any rules setup yet but I…
Local Filter - Domain Admin Login/Authentication Failures
Hello, I am looking at creating this filter for domain admin login/authentication failures. the filter uses the failedauthentication.destinationaccount which points to my directory service group for builtin domain admins. it also uses the userlogonfailure.destinationaccount which also points to the same builtin domain…
Problem with emails and SourceMachine.
Hi there community, I got a strange problem that we cant solve: We got a user defined group Called "Legal Addresses" with a bunch of IP addresses. We have two rules, one for successfull logins to a switch made from an adress not in the "Legal addresses" list. If a successfull connection is made from an illegal address(not…
Device authentication failure
Dear All , I am new to solarwinds-sem, I had configured the Microsoft365 connector and I am getting many logon failure events with the reason:deviceauthenticationfailed , note that my organization has a hybrid environment. Has anyone else faced this ? Any ideas?