Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

LEM Linux Supported Versions
HI, Can anyone please confirm me that SolarWinds LEM supports OpenSUSE version 42.0 Linux version??? Thanks jhynds prawij
connector discovery already running (adding a node)
I am attempting to search for nodes, but the LEM says "connector discovery is already running. Cannot run at this time". I have searched for nodes before, but it has not been running for 24 hrs. Any ideas?
Backup LEM to DFS Share?
All, Can I back up LEM to a DFS share? Over the weekend the group which admin the servers at my company made a change from CIFS share to DFS share. Now I get an error when I attempt to back LEM up to a DFS network share. Towards the end of the error it says the following: “I got an error, so I'm going to exit. Details:…
Anyone know what epic rules are?
When I run the diskusage command out of cmc I see sometimes my rules appear to be full. Maxed out at 1000 rules and appeared jammed. I bounced the appliance and it clears things up. It will run for days without jamming. What are epic rules? I want to go on an epic rule journey.
LEM Oracle Unified Auditing
I'm trying to get Oracle Unified Auditing connector to work in LEM. I currently have Oracle Database connector working - connected to two other databases. I have Unified Auditing turned on in Oracle 12c and have created a dedicated user to connect from LEM. The user has been granted the AUDIT_VIEWER role and I can login as…
How to export LEM rules (swrul files) into PDF format
I have LEM 6.3.1. I know how to export the Rules; Click Build > Rules In the Rule Categories & Tags pane, select the category that contains the rule you want to export. In the Rules grid, select the rules you want to export. On the Rules grid toolbar, click and select Export. In the Save in box, locate the general area in…
What causes /usr/local volume to grow and change size?
I enabled the built in rule for SolarWinds Disk Warnings. I learned how to change the limits on the rule from the CMC. My question is I've noticed the /usr/local partition growing and changing sizes... does anyone know what makes /usr/local grow like this and does the LEM appliance manage this somehow? It seems to grow and…
Microsoft Forefront Threat Management Gateway Logs(Huge Traffic)
Microsoft forefront threat management gateway has generated huge logs after integration with solar winds LEM.I have heard that LEM(SIEM) is not a solution to monitor proxy logs.I have been guided to implement a proper web proxy solution and monitor those logs on a newly deployed solution or monitor your logs through…
Back up logs or LEM database, restore at a later point in time for searching.
I have a requirement where we need to restore old logs and search them for forensics. I wanted to import back into LEM or forward them back. I see an export option, exportsyslog, in CMC but that doesn't look like is it the actual logs from all the servers in my farm. Is there a method for doing this?
LEM - How to have a notification on future password expiry
Password expiry is a tricky event. It is typically a problem you want to be proactive about rather than reactive. Microsoft, through Active Directory, does not consider Password expiry as an event. In this same time, LEM (Log & Event Manager) will receive Windows event logs and not go inside the AD to look for these…