Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Need some Assistance with SEM
Hey Everyone, So I am digging into a SolarWinds SEM appliance for the first time as I didn't configure it. I wonder if there is a good place to start trying to understand this solution? I have a few questions that I will list below as I have noticed but don't quite understand. 1. When it comes to logging are Rules or…
Best Way to Remove Stale Devices in SolarWinds SEM?
I've been tasked with cleaning up old devices in SolarWinds SEM. Over the past two years, there have been numerous network changes—many devices have been removed, and many new ones have been added. I’d appreciate guidance on the best way to identify and remove stale devices from the system.
How to create a widget based off rule, filter, query. Example UserFailedLogon.FailureCount for the last 30 days but I want to be use that as widget in my dashboard
For Example User failed logon for the last 30 days but I want to be use that as widget in my dashboard. SEM dashboard only has a handful of widgets
FedRAMP now requires (DISA STIG) the syslogs from the firewall to the SEM must travel over TLS
Does SEM have the capability that the Log Analyzer has, the ability to accept syslog data over TLS port 6514?
How to create a rule to alert when the SEM appliance stops receiving logs? If this specific rule is not possible, how about a rule that alerts on a total number of logs received within a time period (i.e. 5 or less logs in 15 minutes?)
How to create a rule to alert when the SEM appliance stops receiving logs? If this specific rule is not possible, how about a rule that alerts on a total number of logs received within a time period (i.e. 5 or less logs in 15 minutes?) Thank you
How To get an SolarWinds user login report for individuals
Hi Team, We need an report which displays only individual user logins instead of displaying whole organization...Please help me with SWQL query or something for the same
Concurrent Logon from Different Workstations
Hello, I'm relatively new to SEM and I'm looking for a way to monitor concurrent logons from multiple workstations. We need to be made aware when a users account is logged in more than once, say a destination server has 2 'admin' logins from different source machines. Is this possible? Thanks!
Is it possible to rename a non-agent node?
Hello, Is it possible to rename a non-agent node? We have Cisco switch non-agent nodes that have an active connection to the console, but the hostname does not display. I am only seeing them by their IP address. The switches are "logging host" to the correct SEM IP and using the matching facility number in the Managed…
SEM Connector for Windows DHCP audit logging.
I was unable to find a SEM Connector that would retrieve Windows DHCP audit logs from the default path "%windir%\System32\Dhcp". I would like to collect all DHCP audit logs to capture DHCP lease assignments of our network domain systems. Is this possible using a SEM connector? Thank you
CVE-2024-38819 - Spring Framework Path Traversal vulnerability
Can anyone confirm if SolarWinds Security Event Manager is impacted by the Spring Framework path traversal vulnerability (CVE-2024-38819) Many thanks