Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Send Email Message action - could not be edited.
Hi there...I am trying to edit a rule to have an IP or host name detected when a user was added to administrator group. Previously created rule (by another person) doesnt have the IP or host name to detect, when the event is triggered. I am trying to edit that rule & also added another "send email message action & I cannot…
SEM / LEM rule creation basics
Hi there...I have worked on LEM before, but its been awhile. I am trying to find if I create a rule and not specify a group to target for systems or users, will that rule apply for every nodes thats added in the LEM ? Can you please advice me in that ? I have been watching videos about creating rules, but when tried to…
Nodes have the agent installed, but no nodes are showing.
I have a trial version of SEM installed as a test, the windows installer instals ok, the server is configured and can ping ip addresses, but the nodes aren't showing on the GUI. I've left it around 45 minutes for the nodes to communicate with the server, but they're not there. do I have to do anything else? Such as a…
Monitor ExtendedEvents and SQLAudits in SQL Server
There is a good discussion on how to use an old deprecated approach to monitoring SQL Server (audits) that uses a trace (SQLAuditor.exe) but the trace misses much of the information required by the STIGs. Meanwhile, with the STIG, we generate a great deal of information (I've seen it reach 20 GIG a day but we found a way…
SEM Console install error - Certificate Problem !
Hello, When trying to install the latest AIR Console for SEM management (version 6.7.1), I get the following error: I have the latest stable release of Adobe AIR (version 32.0.0.125) Any hints or only a support case can resolve this ? Thanks
File monitoring on Linux
Hey guys, What connector would you guys use to monitor changes made to a file on a Linux host? Specifically a log file. I would like to be able to generate events noting the changes made to said file. Is there a connector that can handle this? Thanks, Diogenes
List of default SEM Reports with report description
Where can I find a list of the current default reports?
Fortimail And FortiWeb Logging
Hi, has anyone successfully setup the fortimail or fortiweb to successfully log on SEM? i am running the latest update for the virtualised appliances of both. i can see the logs passing the firewall and going to the LEM. I just cant get the console to show the info through the connectors. Am i missing something? Any help…
Looking for list of default reports in SEM reports
There used to be a list of default reports with descriptions available for LEM. I cannot find it now. The page redirects to a search. Does anyone have this list or a link to it?
Decommissioned Nodes Still showing in SEM Nodes
I have servers that have been removed from the network still populating in my list of Nodes, I have even manually deleted these nodes. What would cause these nodes to reappear?