byrona ✭✭✭✭✭

GoldTipu​ I don't think you are understanding why people here are upset. I realize there are always limitations but I have also been told on numerous occasions by SolarWinds Support and Application Engineers that the 12,000 element limitation is not a hard limit but was used as a baseline and could be exceeded with proper…

ecklerwr1​ I certainly hope you confirmed that LEM supports all of your devices/vendors before you purchased it. While I absolutely loved the LEM product, I found the most limiting part of it was that if they didn't support a device/vendor it didn't give me any option but to find a different solution. They REALLY need to…

Thanks kellytice​ for the update! At this point do you know if LEM is supported in Azure?

There is a feature request for that HERE, go vote for it if you haven't already. 

Also, THIS seems like a simple basic request; let me exclude items in the FIM rules.

I think the new items on the roadmap are great; however, the one thing that is right up there that is killing our ability to fully utilize this SIEM solution is the inability to create our own connectors. I can't keep telling clients that we can't support their logs because they are not on the "supported list" for LEM. I…

The one thing I would like to add to my wish list above would be

Now that 6.3 has released I would love to see an update to the roadmap!

It has recently come to my attention as we use LEM more and more that the FIM component doesn't support exclusions. With that being said I have opened a feature request for FIM File Exclusions and would love to see that considered.

We are actually in the process of evaluating SIEM systems to decide on what our Next-Gen SIEM will be for the security platform we are creating. I think LEM is a great product and has a great framework to carry it into the future; however, when comparing it to some of the more robust products on the market I feel like it…

derik.pfeffer‌ I can't agree more. I opened a feature request for that HERE for anybody interested in promoting it.

I would love to see an updated road-map since 6.2 has been released. While I love working with LEM we are in the process of re-evaluating our InfoSec road-map and I am not sure how well LEM is going to fit in going forward. I would love to see the road-map to help with these decisions; thanks!

Awesome, thanks for sharing this!

Any info on if this would be possible or not would be much appreciated, thanks!

kellytice​ Thanks for that clarification! If we get closer to looking at getting Patch Manager would it be possible to schedule a phone call with you or somebody else there at SolarWinds to do a Tech Demo and see how it might fit our needs?

chadsikorra​ I am super depressed to hear that as we were considering looking at moving away from our current patch solution to Patch Manager. If Patch Manager can't fire off patches on a schedule and requires a bunch of baby-sitting then it won't work for us. 

Community Managers: This post should probably be moved to the Kiwi space.

To send Widows logs to Kiwi syslog you will need to use the SolarWinds Log Forwarder which is free download if you have Orion or Kiwi. Hope this helps!

You guys are awesome! Thanks so much!

How robust you need to build your systems depends on your Orion implementation's size and configuration. With the license levels you have you shouldn't need too get to crazy with the environment unless you plan to really scale it out later. We are running Orion SLX and Orion APM ALX and we have one Additional Polling…

We are getting to a point of needing to re-evaluate patching solutions and since we are a very heavy SolarWinds shop I would love to consider using this product (keep in in the SolarWinds family); however, I would really like to see a Product Manager comment here on the status and future of this product. mrs.alterego​ I…

While I don't currently use this product I have considered looking at it as a potential replacement for my current system on several occasions; however, the two things that keep putting me off are the lack of updates I have seen to the product in addition to it's reliance on WSUS. I love SolarWinds products and we use a…

In my experience if you have a very basic (no special configuration) configuration of net-snmp then Orion will automatically find the SWAP space on those devices.

Well, I come in today and I am seeing data from the Vormetric connector so it looks like that one is also very slow when it comes to being able to actually see the data in nDepth. Any thoughts on what is causing the delay with both of these connectors? 

Well, I just setup the Vormetric connector to look at /var/log/local7.log and send to nDepth on my appliance which is where a lot of my log dump is going and after about 20 minutes I still show nothing when I do an nDepth search of the raw logs. The problem is I don't know if this is because I am seeing the delay again or…

Ok, that is exactly what I was seeing so at least it's consistent.

This is a lab and that was the only Syslog connector I was using. What's odd is that I cam in today and there was a bunch of syslog data in there but nDepth searches didn't seem to be working very well (if at all) on it and when I stopped the connectors the data didn't seem to stop flowing in. While I can't say what…

Ok, I am able to start the connector now; however, I am seeing a few other issues. So, here is what I have so far: * LEM appliance setup in lab and running properly * nDepth configured on the appliance * Orion sending all of the syslog data it receives to LEM so that I have syslog data to work with * GenericSyslog…

I just finished getting a LEM appliance setup in my lab with nDepth enabled on it and I have imported this connector. When I try to start it on the appliance it won't start; any thoughts?

This very well may address several of my needs so I am going to set it up in my lab as soon as I can. Thanks for putting it together!