Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Can LEM connect to FireEye and download the event
I want to implement FireEye as IDS/IPS but I want to see the event in Solarwinds LEM
we have Model HW-004S PX MD Tech Enabler fireeye appliance ,whether can we monitor this under solar winds with health and other metrics if please ,how to configure polling IP in to fireeye. Thanks
we have Model HW-004S PX MD Tech Enabler fireeye appliance ,whether can we monitor this under solar winds with health and other metrics if please ,how to configure polling IP in to fireeye. Thanks
SSL Traffic Not Showing a Source
I am monitoring SSL traffic into and out of our network using LEM. All of the traffic coming from inside our firewall has no source listed. Do I need to do something to get this IP to show up?
LEM - Event info - unmatched solarwinds mssql auditor Data - Broken log line
Hi, I've configure MSSQL Auditor and works fine, already log queries. However I've a problem, from the LEM manager monitor on the column called "Event Info" I only see a description that say "Unmatched Solarwinds MSSQL Auditor Data - Broken Log Line ($Revision: #42 $)". I've attached another strange things about the tool…
How to create a rule to monitor all activity of a specific admin
Hello, I have seen the videos and searched the forums, but I was not successful in finding how to create 1 rule that will monitor all the activity for a specific admin. Again, I know there is a way to create multiple rules, but I wanted to know if there was a way to create 1 rule that covers all. Any assistance would be…
MSSQL Audit from remote MSSQL server problem
Hi, before I describe my problem, this is my environment: * 1 VM that runs SQL Server 2008R2 (from which I need to collect log) * 1 VM that runs Solarwinds LEM Manager appliance * 1 VM that runs SQL Profiler, LEM Agent and MSSQL Auditor (that have to collect data from the VM that run SQL Server described above) From the…
Need help with startup rule
Hello, I'm a relatively new user of LEM. I'm trying to create a rule for system startup. I can locate the SystemShutdown and SystemReboot events but can't fine anything that is related to startup. Would someone let me know if this would be possible? Thanks.
How to monitor TOR (Deep/Dark web access)
Hi, Is there a way to be alerted when a user accesses the deep or dark web or when using TOR ? How can I configure a filter to see these accesses and email alerts? Thanks
LEM filter
Hi, I am trying to set a filter to alert me for a specific windows security event. I have set up the rules, but I am not getting any alerts. Am I setting the filter the correct way ? The screenshot is attached. Thanks,
Requirements are vague!
Hello! Pretty much in at the deep end and need some help; The system has been.. left alone for a while and I've never touched a LEM so please ELI5! I have 4-6 LEM managers (Which I know where the physical boxes are and which offices are feeding into them) with various locations feeding into them. Agents are install on the…