Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

LEM Best Practice Options for Security Logging?
Hello Team...I was wondering in terms of "Best Practice" tracking for the PCI, NIST, Security logging...is there such a thing as "Best Practice"? In other words, when I look at the different sections for Security, PCI, etc. I often see the same or similar templates for use. Currently, the environment we are using has all…
Rule to kill communication with malicious IPs
Hello, What would be the best way to go about switching off communication with a malicious/compromised/blocked IP that is fed from Thread Intelligence Feed or manually inserted into UDG from Emerging Threats rulesets at Index of /blockrules I tried to correlate WebTrafficAudit event (OR) Network Audit event group with…
RSL Error (LOG & Event Manager)
Dear All, I am getting RSL error Flex Error #1001: Digest mismatch with RSL Redeploy the matching RSL or relink your application with the matching library.I have tried following steps but unable to resolve it. Solar winds LEM is running fine on deployment server browser. Resolution * Clear the browser's cache and cookies.…
Installing antivirus (Symantec Endpoint Protection) on LEM Server
Hi, Due to security compliance policies, i need to install antivirus (Preferably Symantec Endpoint Protection) on LEM server. Is it supported? My LEM is VMWare appliance.
LEM upgrade on Linux
Hi I am new to LEM. We have LEM installed on a linux box that has not internet access. Although I can give it access to network shares. I am looking to upgrade from version 6.4 to 6.5. How best can I achieve this. I have access to the web gui or ssh access Thanks
LEM - Change notification email for all rules
Hi. Hi have set up SLEM... in the configuration (can´t remember when) i declared one email address so all notifications are redirected to that email. I see I can change (or add) emails to get notifications on every rule... bu how can I change the notification email for ALL rules? Thanks in advance
AD new user
Hi, I've set up a new alert for new AD users but I don't get who created the account, just the account created. I need a template with the following: User created: Created by: Time & date: If any one can help me. Thanks, Michael
Expired Certificates
Hi, Does anyone know if you can create alerts for certificates that are about to expire or have expired on a network? Thanks, Michael
Netapp Clustered Data ONTAP CIFS auditing to LEM
NetApp Clustered Data ONTAP creates audit log files on a file share (as far as I can tell it is not able to send the log information via syslog or snmp etc). Does anyone know whether and if so how it is possible to import these log files in to Solarwinds LEM? Thanks
Using a Threat Intelligence Feed with LEM?
I am curious if anybody out there is using LEM in conjunction with a Threat Intelligence feed? I realize that LEM doesn't currently accept any of the feed protocols; however, I have seen that some feeds provide human readable dashboards which can then be used in conjunction with a SIEM such as LEM.