Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

LEM for Rookie

Hi all,

I'm new to this community and to the Log event manager

I'm starting on a new project which involves Solar wind LEM to install... i'm very much confused where to start with

I have a 2 workstations and 5 server 2 switches and 2 firewalls ... i need to implement LEM onto it ..can anybody can guide me please???

Thanks

Cris

Find more posts tagged with

Accepted answers

FormerMember

Hey Cris,

The first place I'd start is with the "Getting Started" section in Ops Center, which has some videos that'll help you figure out how LEM works and where to find things. Generally what you want to do is:

Get data coming in from devices by sending their syslog to LEM
- Configure those product integrations in Manage > Appliances, click the gear next to your LEM appliance and click "Tools". Enable the right connectors for the right products.
Get data coming in from servers & workstations by deploying agents to those systems you wish to monitor
- On Windows, these agents will by default have the Windows Event Logs configured (Application, System, Security).
- If you want to integrate different applications (like IIS, Anti-Virus, etc), you'll want to configure those product integrations from Manage > Nodes, click on the agent node in question then the gear to the left, and go to "Tools".
See the data you've got in real-time in the Monitor area
- Here you can build filters to get perspective on what's coming in from different systems.
Build some rules to notify you when different events occur
- From Build>Rules, you can either clone and enable our out of the box rules, or you can build your own.
- Make sure you've got Email Active Response configured if you're going to send email messages (See this KB: SolarWinds Knowledge Base :: How to Configure the Email Active Response Connector)
Search for data to help with troubleshooting, analysis, or just to see what's going on in your data
- Check out Explore > nDepth
Make auditors happy with reports
- Reports Console is a separately installed app (windows-only) that lets you run, filter, and tweak our out of the box reports.

Let us know if we can help in any of these areas.

All comments

FormerMember

Hey Cris,

Get data coming in from devices by sending their syslog to LEM
- Configure those product integrations in Manage > Appliances, click the gear next to your LEM appliance and click "Tools". Enable the right connectors for the right products.
Get data coming in from servers & workstations by deploying agents to those systems you wish to monitor
- On Windows, these agents will by default have the Windows Event Logs configured (Application, System, Security).
- If you want to integrate different applications (like IIS, Anti-Virus, etc), you'll want to configure those product integrations from Manage > Nodes, click on the agent node in question then the gear to the left, and go to "Tools".
See the data you've got in real-time in the Monitor area
- Here you can build filters to get perspective on what's coming in from different systems.
Build some rules to notify you when different events occur
- From Build>Rules, you can either clone and enable our out of the box rules, or you can build your own.
- Make sure you've got Email Active Response configured if you're going to send email messages (See this KB: SolarWinds Knowledge Base :: How to Configure the Email Active Response Connector)
Search for data to help with troubleshooting, analysis, or just to see what's going on in your data
- Check out Explore > nDepth
Make auditors happy with reports
- Reports Console is a separately installed app (windows-only) that lets you run, filter, and tweak our out of the box reports.

Let us know if we can help in any of these areas.

crishna

Hi Nicole

thanks for replying

I want to know about the installation process of my requirement like ( what i have install on server and workstations ) etcc... the whole build process .... and then i can come to what you are referring to..

FormerMember

I would recommend starting with the Quick Start Guide and videos. After deploying the LEM virtual appliance, you install agents to your servers and workstations, syslog your networking devices to the LEM appliance, then configure what you want to monitor, when you want to get notified, etc.

Quick Start Guide

Videos:

Tour Log & Event Manager

Adding Nodes, Devices, and Systems

Effectively Creating Filters and Monitoring Events

Creating Rules for Real Time Correlation and Response

Using nDepth and Reports to Search and Analyze Data

crishna

Thanks Nicole