Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Installed SEM 2021.4 and SNMP events are not showing on the console.
I installed the latest Security Event Manager (SEM) 2021.4 a few days ago. My issue right now, SNMP trap is catching events (checklogs) but is not showing on the console. I did not have any issues on my other network when I installed 2021.2. Current configuration: I have enable the SNMP Trap services in the SEM. Best…
SEM STIG Full Text Privileged Commands?
This is the last requirement needed from Solarwinds for our systems. I need to be able to provide reports of Full Text Privileged Commands. I have searched everywhere and have found nothing. Has anyone had to do this before? If so how did you go about accomplishing this? Thanks in Advance!!
Are you using SEM reporting? We want to know!
The SEM (Security Event Manager) Team want to hear from you if you've been using reporting in the tool! Take this short (~ 5 min) survey, and receive 500 THWACK points! https://survey.alchemer.com/s3/6251383/UX-202103-SEM-Reporting Thanks for your help!
Tips on creating a file extension change rule
Hello all, I'm attempting to create a rule when a file extension is changed. I'm not sure what event windows creates when doing this and was wondering if anyone had info or tips on going about this. Thanks in advance for any tips or advice!
Search api
Hi everyone , having a query on the availability of search API for searching events in SEM . And if it is , is there a way to configure my SEM to query events from another SEM using the search API?
CVE-2021-4034 vulnerability for SEM 2021.4?
Hi there, CVE-2021-4034 (https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034) affects Debian, which the Solarwinds 2021.4 appliance runs on. Is there a patch for this vulnerability? Thanks, Albert06
Consuming X-Forwarded-For Header from IIS Logs
I don't see any way to get SEM to consume the X-Forwarded-For header in IIS logs. Is there something I am missing?
Suspicious DNS
Hello - I know that the suspicious DNS rule is often the one that creates the most noise on the network and what I am looking for is to find the best option for writing this rule. Currently this rule will generate a ton of traffic. Where as this specific rule generates no traffic at all. The first rule is generating its…
Is there a sane way to tell which Rules are using which email Templates?
A related question. Is there some sane way to tell which rules were touched 1-2 days ago? I see an option for modified up to 24 hours ago but then it goes "24+" which isn't helpful for me. I know I can hover over each of the many many rules and get that info but it's not ever going to be a priority for me to spend that…
FIM - File Integrity Monitoring is only showing NT/Authority
I have the latest version of SEM. And I am running a Windows Server 2019 with file shares When my users open a file from their own desktop, It flagging as NT/Authority. How do I fix this? Thanks -Garen