nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Security Event Manager (SEM)

Security Event Manager (SEM) Feature Requests
Newsroom
Get the latest news about SolarWinds Security Event Manager (SEM)

Recent Discussions

LEM Rules exact match syntax
I have created a rule in LEM and by itself it is firing correctly... for the most part. We have a list of individuals that we monitor their lockouts. The trouble i run into is that we get a few false positives because the rule catches other users. Correlations UserDisable.EventInfo = *JDoe* This successfully fires an email…
Calling All VMware vCenter Admins (2,000 THWACK Points)
We're currently doing some research around VMware vCenter logging support with Log and Event Manager. In order to accomplish our research and understand the format of the vCenter logs, we need log samples from vCenter instances, ideally vSphere v6 or v6.5. You can view information on the location of the logs files via this…
NEED: LEM Mentor - Who has gone through an audit and used LEM?
Hey guys I have an audit coming up in 1st week January, 1st for this company, and I am on point for SIEM/LEM. - Who has gone through an audit and used LEM?
LEm with Cisco Firepower / Firesight syslog
Hi, I have a Cisco Firepower virtual appliance, and try to see log into LEM. I have configure Syslog as I found here : Configure a FireSIGHT System to Send Alerts to an External Syslog Server - Cisco On the LEM side, I cannot found any log, or information. I try to reconfigure the connector, but without success. Any one…
Best report export format from LEM report?
What reprot format do you export scheduled reports? I initially had it as PDF format, but that does not allow sorting/filtering. The .XLS format is the closest i can get however columns are not aligned.
How to monitor local user accounts
How is the best way to monitor for local user accounts being added, changed or deleted from Cisco IOS and Nexus switches? Thanks, Terry
LEM as a netconsole host?
We had an issue with our KEMP LoadMasters last week where some virtual services were removed from the configuration and we/KEMP cannot explain why. One of their suggestions is to setup a netconsole host since the syslogs sent to LEM from the load balancers didn't help with finding the root cause. This is the first time…
How Does the Windows Agents Determine Agent Id etc.
We are trying to use InstantClones through VMware to deploy our VDI desktops. The issue I'm having is when I search the lem by hostname (ourVM-) I see a single entry, that changes every few seconds. I ran a nDepth Search on InternalDuplicateConnection with thw same beginning of the hostname, "ourVM-" and I get like 1500…
LEM LifeRay Monitoring
HI... anyone successfully using LEM for LifeRay Application Log monitoring?
Policy View/Change rule issue.
I am having an issue with 1 PC in particular that is activating the Policy View rule. I created a custom email so that i knew what pc this was activating on email and it lists both the Detection IP and the Insertion IP. When it comes to the email it is saying "the start type of the windows modules installer service was…