nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

AD new user
Hi, I've set up a new alert for new AD users but I don't get who created the account, just the account created. I need a template with the following: User created: Created by: Time & date: If any one can help me. Thanks, Michael
Expired Certificates
Hi, Does anyone know if you can create alerts for certificates that are about to expire or have expired on a network? Thanks, Michael
Netapp Clustered Data ONTAP CIFS auditing to LEM
NetApp Clustered Data ONTAP creates audit log files on a file share (as far as I can tell it is not able to send the log information via syslog or snmp etc). Does anyone know whether and if so how it is possible to import these log files in to Solarwinds LEM? Thanks
Using a Threat Intelligence Feed with LEM?
I am curious if anybody out there is using LEM in conjunction with a Threat Intelligence feed? I realize that LEM doesn't currently accept any of the feed protocols; however, I have seen that some feeds provide human readable dashboards which can then be used in conjunction with a SIEM such as LEM.
SQL2016 >> MSSQL Auditor - Is there a profiler template available?
I am currently evaluating setting up database monitoring for Solarwinds LEM and the instructions advise me to import a profiler template and then edit this template. I am using SQL Server 2016. When I import the template and select edit, I can see the imported template but ONLY when I select SQL Server 2014 as my SQL…
LEM Help
Howdy- We are evaluating LEM for offload of our Qradar system. Qradar is a bit overloaded and upgrading it is very costly. The security team had us spin up a demo of the solarwinds LEM product. We put a few various devices on it and the information provided was satisfactory to the security team. I have the spec sheet- but…
EventDSC.log
This file located in C:\Windows\SysWOW64\ContegoSPOP\lib has grown to 42GB and is causing the C drive on one of our servers to run out of space. On other servers the file is only 7 kb and we are at a lost as to what caused this. Any insight into this would be appreciated.
Event Log Forwarder doesn't work!
Hi Team. I'm trying to setup Event Log Forwarder on Windows 2016 to log EventViewer message to my syslog-ng (linux). The syslog server port (UDP) and ip are configured correctly. The EventViewer filter is return the properly information. But nothing happens. any ideas? Thanks
Removed Crystal Reports runtime and LEM reports 6.4.0 to fix error... now no installer will reinstall the crystal reports runtime!
In trying to fix the external reporting application I removed Crystal Reports Runtime v11 and the LEM Reporting tool. Now I've tried the original installer from the All-In-One bundle and even downloaded the 6.4.0 so called ReportsandCrystal.exe installer. No matter how many times I uninstall and reinstall this the crystal…
Rule Notification for Unauthorized USB is attached to the agents
Tested and working for: Our e-mail response connector is enabled and working. We have enable the USB-Defender Policy connector and uploaded a notepad for USB devices that are white listed. Also, included the USB devices ID into the "Authorized USB Devices" group. Unauthorized USB is now currently detached instantly if…