Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

Device in a Connector Profile group vs Device that just have connectors setup not in a profile group.
This might seem, little weird question. I am new to the lem software still, please help. I have been looking over all my Connector Profiles groups that are in LEM. I have notice that not all devices are set to a specific or general profile group. This made me look at devices that are not showing up in a profile group. When…
Why is it when, I try to use nmap to verify the ports on Windows Server is open for LEM shows up as closed Unknown
Good day everyone, I had idea to make sure that new windows servers that will be added to the LEM ports are open. Ports I am talking about is TCP 37890-37896 I was trying to use NMAP nmap -sT -p 37890-37896 10.x.x.x This is the output PORT STATE SERVICE 37890/tcp closed unknown 37891/tcp closed unknown 37892/tcp closed…
I'm receiving hundreds of logs for users with Login Failure
We are seeing hundreds of failed logins for users from the ToolAlias: Cisco ACS and AuthPackage: MSCHAPV2. Is there a way we can configure LEM to reduce these logs? I've contacted the users and they always tell me the same thing. "The only thing different about my account is that I've reset my password recently" I feel…
Logon Used Case in LEM
Is anyone familiar with creating a rule that fires when an individual has an account logged into two machines at the same time?
When I create a new case at website, I couldn't submit it.
When I create a new case at website, I couldn't submit it.
How do you setup AD Security Logs with LEM?
I'm trying to set up AD logs with LEM. I downloaded the Remote Solarwinds Log & Event Manager Agent. My concern is that with my company we have hundreds of Windows servers. Is it necessary to use all of them? Can we feed these AD logs into LEM by only adding a few Windows servers? Would somebody please post a detailed…
How does the LEM agent generate its SID/UID?
I am curious how the LEM agent generates it's SID/UID? We are working with a client to develop a BC/DR solution and I am curious when the replica nodes comes online if it will check in as a new node or if it will appear as the same node?
LEM log4net connector to folder
Hi we have a configured DFSR which collects log4net app.logs from many servers to one server. And we need to analyse these logs. The problem that I met is when I create log4net connector on that server, in the "path" settings i have to put the exact path+filename of the log file. If the path contents only a folder path the…
Does LEM agent And Orion Agent Same?
Hi All, i have a simple question, my customer asking if they are currently using agent to monitor SAM and NPM. if they buy LEM.. does they need to install another LEM agent? or the existing agent can be integrated to LEM. please help me.. NEWBIES !!
How to tell if you are setup to use raw logs in LEM
I am new to LEM area There is a LEM that is already setup and running. Is there a way to tell if we are getting raw logs or ??? from the windows servers, linux and network equipment etc....??? Any help would be great Thank you