I'm evaluating this at the moment and am starting out by pointing a few Cisco devices towards it.
I followed the advice here on how to set this up and create the LEM tool: http://knowledgebase.solarwinds.com/kb/questions/2866/Configuring+Cisco+IOS+Routers+and+Switches+to+Syslog+to+Your+LEM+Appliance
Now I have two Cisco devices connected following this guide and the problem I'm having is that whenever I receive an alert it comes in twice. I beleive it's something to do with the LEM tool. I've created 2 (1 for each device) and they are both set to logging facility local2. Is this correct? How does LEM differentiate between the devices so not all my Cisco devices are stuck with the same ToolAlias?