Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Metaswitch question
I a a metaswitch that reports SNMP to our NOC. I am wanting to add Solarwinds as a receiver of these Traps. Does anyone have their Metaswitch added to their Solarwinds Node/Alarm reporting? If so how'd you do it? I dont know if it will beneficial (I think it would) Since I already have the Traps sending to the NOC. Thanks-…
SEM getting events from a device not listed as a Node
I have an HP printer that is successfully sending events to SEM as evidenced by the filter successfully showing those events. Why does the device not show up as a Node on the Dashboard?
New to SEM
I installed SEM a year ago and set up some event notices with the help of an outside consultant. I understand how to set them up and email results. Mine is a windows network with 70 nodes. I just changed the network admin password and I am seeing a lot of failed admin logins. 10 or so in a row. I have configured the emails…
Windows Remote Desktop monitoring
What is the best way to configure SEM to monitor Windows Remote Desktop Connections. I have added the "MicrosoftTerminalServicesRCM" connector to the PC I would like to monitor, how ever I am not seeing anything in the live events or historical.
Need help with PCI filters/rules!!
I have found and read KB on PCI compliance, but I need some guidance on the specifics of how SEM filters and rules should be configured. Specifically, sections 10.2.1 thru 10.2.7 and section 11.5 are of special interest to me. I also see the OOTB filter, "Top PCI Events", but it is not clear to me how many of the above PCI…
Adding sophosXG in SIEM
Dear Committies memmbers, We have enabled the logs in the sophos xg in order to receive the logs in the SEM but unfortunatly, im not able to recieve any logs from XG firewall. if there any one have already experience your cooperation will be highly appreciated. Regards, Mutaleb Rahmani
Recently Added SEM Connectors - Updated August 2019
Recently added connectors are:August 2019 * Atlassian Bitbucket * Atlassian JIRA * AuthLite * Extreme Networks VSP Switches * Fujitsu Eternus Storage * Fujitsu iRMC * Gemalto SafeNet Luna * Grandstream Gateway * Guidewire Software * HP 3PAR StoreServ * Juniper Pulse Gateway * Microsoft Exchange Message Tracking * Microsoft…
Tips on finding who deleted a folder.
Anyone have any tips on writing a query to find out who deleted a specific folder? Is there a canned report for that?
Trouble finding source IP address for Windows domain logins
In a Windows domain, all logs from our domain controllers are being sent to the SEM. We are wanting to know the IP address for the device where a user is logging in from yet can't seem to find a consistent record of it through the logs. Is that a field that is commonly recorded or do I need to turn on additional auditing…
Adding Aruba 6300 and 8325 to SEM
Hi there none of our Aruba 6300 and 8325 switches are showing up in SEM. We have configured the syslogs accordingly logging x.x.x.x logging x,x,x,x logging facility local2 Any help would be appreciated!