Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

New name for LEM
Is LEM the same as the "NEW Log Manager for Orion", drewmanchester? 5/23 Live Webinar (NA): Putting Your Logs Where They Belong with Log Manager for Orion
Stateful Log Alerts?
I am curious if it's possible to use LEM to create state based events out of logs which generally are not state based. As an example... I want to a log that comes in to trigger an alert. I want that alert to continue to send out alert emails every 30 minutes until the alert is re-armed. I want a different defined log to…
Having Issues Email Connector - LEM
I noticed that email were not being received from LEM. I went to the email server admin and he has been STIGing the exchange server. He said he enable TLS on all connections according to the STIG. I tried to enable TLS on my connector, but it is not working. I get a 5002 error and info saying could not convert the socket…
LEM & Compatible Cisco IOS-XR Connectors
At the moment, i'm sending syslog messages to LEM from my ASR9010. via the folloiwng statment: logging 10.1.99.138 vrf Mgmt-Intf severity notifications port default Those who SSH into the router generate a notification, as well as any configuration changes. However, that's about it. Has anyone deployed a connector and…
USB Defender - File audit events not being received
Hi, We've finally got around to looking at implementing USB Defender but only require it in a file audit capacity. So we don't need whitelist or UDLP items, there's GPO in place and AD secgroups to control USB access. I have one development Windows 7 citrix VDI desktop accessed via a Wyse terminal and I can see…
LEM Local User - Password Change
Is there a way for local LEM users with "Guest" or "Auditor" user role to change their password in LEM? Don't see anything in documentation as to how to do it, and testing it, the user with that role doesn't appear to have the ability to edit his user to change password. Is there a mechanism for a user to do this?
Health Monitoring
Hello fellow thwackians. Does anyone know why at the beginning of every day that the Health monitoring of every port on switches basically refreshes? Just more curious than it is a problem.
how to add HP network device to Log and Event Manager
Hi all, I want to know how to add HP device to log and event manager? I think i need to configure connector but i did not see connector discovery in connector lists. Thanks.
Using auditd for Linux File Integrity Monitoring with SEM
I have seen a few requests for examples of using auditd on Linux in combination with SEM to create something similar (with some caveats) to the file integrity monitor that is available out-of-the-box for Windows nodes. Auditd is a very complex tool with many options for logging file access and process execution but if you…
LEM Product Questions
A client is looking at a competitors SIEM and since he already owns SolarWinds, I'd like to get some quick answers if possible before we have a decision on this competitors product. 1. He already has a huge investment in NPM/NCM, with SolarWinds LEM this integration will provide: <?> 2. SolarWinds is a better SIEM for…