Need some log from windows event viewer

reeshiie

Hello,

I am new at solarwinds. As far as i know if i install agent in a machine then all application, system and security related log will be forwarded to SEM by default. There are some application log which i want to fetch from a windows machine. From event viewer i am viewing those application logs but solarwinds are not fetching those logs by default. My question is-

1. Is there any connector which will catch up all those application log?

2. If i need a connector does solarwind support team will provide that? Is there any extra cost involved for a connector?

3. Does action such as disable network works in solarwinds. I have configured a rule for disable network action. Rule was fired on agent and pop up message came up that network has been disabled, But action was not executed. What could be the possible reason?

neomatrix1217

1. Is there any connector which will catch up all those application log? Take a look at this KB article and see if that helps

https://documentation.solarwinds.com/en/Success_Center/SEM/Content/Admin_Guide/6.1-configure-sem-to-monitor/sem-windows-audit-best%20practice.htm

2. If i need a connector does solarwind support team will provide that? Is there any extra cost involved for a connector? If we do not have a connector for a certain log file then yes we can create one at no charge if this necessary open a support ticket that they will let you know what you need.

3. Does action such as disable network works in solarwinds. I have configured a rule for disable network action. Rule was fired on agent and pop up message came up that network has been disabled, But action was not executed. What could be the possible reason? Did you follow the steps on this KB?

https://documentation.solarwinds.com/en/Success_Center/SEM/Content/Admin_Guide/9-sem_response_actions/sem-disable-networking-active-response.htm