Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Kernal module loads, unloads, and restarts.
I am looking to see if there are any event ids for Kernal module loads, unloads, and restarts in Solarwinds Security Event Manager? I am not sure if I am overlooking it, or if they are under another type of event id?
Solar winds SEM Agent
Hi I would like to understand on the SEM server agent polling and mechanism used by solar winds agent. Does it send data to SEM server periodically with a polling mechanism or whether the server pulls the data from the agent at certain intervals
Juniper SRX320
Does SEM support the Juniper SRX320, and if so, does anybody know what the configuration looks like?
Connector request
How long does it take after submiting a request to create a new Connector to actual delivery?
Brute Force Attack Detection Help
Hi, I'm familiar with the "Continuous Excessive Logon Failure" rule/template. That's great but, I want a little more. What I want to be able to do is create a rule for when a brute force attack is successful. Let's say an account triggered the "Continuous Excessive Logon Failure" rule, repeatedly. So email alerts are sent…
SEM Capture URL from workstations
Greetings all, Fairly new to Solarwinds SEM and can't find an answer regarding if the agent can be configure to capture URL from browser workstations? I can't find a specific connector that would indicates it would do this. Any suggestions?
How to track down which service fails to login on servers.
I changed the domain admin password. I am receiving SEM notices like this. This user account: logon failure "inventory\administrator" At: 2022-04-13 01:30:02.0 From: inventory Source Machine: inventory Destination Machine: inventory Destination Account: administrator Reason: unknown user name or bad password. Extraneous…
USB Extended
After looking at the capabilities of USB defender we realized it would not catch all devices including keyboards and mice. On Thwack I have seen comments about the USB Extended connector, but cannot find it anywhere in the SEM. How do I access the USB extended feature?
It shows active license on the custorem portal but not activated on the sem application
I am trying to activate SOLARWINDS SEM offline. I have downloaded the license file from the solarwinds customer portal but when i try to activate it on the application it shows an error " License is not for this machine" I have checked the hostname and the machine id to be correct.
Create or Rename a Group within Live Events
Simple question ... but apparently not simple to figure out: How do I create a new group in Live Events? I want to group similar filters together. Thanks,