curtisi

The LEM web console operates on either port 8080 (http) or port 8443 (https/ssl). The reports console works on TCP port 9001 to communicate with the database on the LEM appliance. Response should look like: Can you confirm that the credentials you're using in the Reports console match a user created in the LEM with the…

No, but you could have the Reports Console auto-generate a PDF of a custom report on a regular schedule.

Right, but if you share LEM directly so that LEM is a share at the top level of the server? So the share path is \\server\LEM\ that should work.

For the normalized alerts, yes. The LEM tries to reduce noise and improve the readability by trimming and formatting data to meet the needs that customers have shared with us. The ability to capture raw logs means you can always get all the data, but it's not the default selection.

Have you tried making this change via the web console instead of the AIR console? We're up to LEM 6.2.1 HF2, can you upgrade in case this is a bug we already fixed?

Once we have the sample logs from the device, the next steps are: You may also post your request to the Thwack forum for the SolarWinds product you wish to see improved. Thwack Feature Request forums are here: http://thwack.solarwinds.com/community/feature-request_tht. Create a post titled “FEATURE REQUEST - Name of the…

Yes, it could expand retention. No, you can't search the archive from the console of your live LEM. The way this works would be: * Setup the ARCHIVECONFIG command on your production LEM. This copies DB data to another server in a proprietary and encrypted format. * Time passes...You need data from the past that is no…

Well, spoot. That kills my idea. There is a way to create a CSV and import it into LEM as a User Defined Group. You can also create rules where the action is "Add value to a User Defined Group," so you could have LEM add accounts over time. Maybe that would work?

One thing with that rule: It'll alert if the EventInfo includes "80." If your disk makes it from 79.4% full to 80.5% full in one cycle (about an hour) that rule won't fire because "81" =/= "80" There is a template rule for disk alerts on the LEM called "SolarWinds Disk Warnings" that was written to alert if any of the disk…

I was a little upset that the best documentation is from the release notes for an RC 6 months ago, so here's a video showing how to setup FIM and analyze the resulting data. Solarwinds Log and Event Manager - Configuring FIM and Analyzing FIM Data - YouTube

Great! Don't forget to mark this as answered for future THWACKers!

My LEM is in a lab at Solarwinds, and we run it about as close to the wire as we can on resources (as you can imagine). I tell people we're always on the lip of the volcano, because the LEM usually has less than 100MB of memory free. If I was a customer and support saw that, they'd have a collective coronary and call me an…

Starting with the basic checks: * LEM version and Reports version match, right? LEM 5.6 needs reports 5.6, and so on. * You've deployed Hotfix 1? * Reports was installed as an Administrator? (On WIndows Vista and up, even if you're logged in as an all-powerful user, you have to Run As Administrator to execute those rights)…

You mentioned the list in the OP? If you have SIDs that matter, you could import them into a User Defined Group and then refer to that UDG as part of filters and rules.

It's actually an internal JIRA case I submitted, I don't know if there's a THWACK feature request for it.

You need to set reservations for the LEM's memory and CPU, or this issue will continue to occur. Reservations should be set equal to the currently assigned resources, in your case the 8GB of memory and 2660 CPU. You may also want to enable the Template rules "Appliance Database Down" and "Solarwinds Disk Full" which would…

You posted your question in the LEM community, so I assumed LEM was involved. You may want to try asking this in the NPM area and see if they have a better answer.

Is your "Activate Rules" button lit up? Can you click it?

OpsCenter and Monitor are transient and real-time, so every time the console is reloaded, they all go back to zero and start counting again. nDepth is how we search the permanent record the LEM creates, so historical data is always in the nDepth.

Go to the LEM via SSH, go to the MANAGER menu and do a RESTART. Then reconnect to the console and see what the state is. SolarWinds Knowledge Base :: Use an SSH client to connect to your LEM appliance

Checked the time on the LEM and the switch to make sure they're both accurate?

Are you seeing events created in the Windows Event Viewer?

Hey Paul, I checked that EVTX and there's nothing in it. Can you re-run the export and confirm it contains some events?

I have a ticket into dev, and have attached the EVTX file. If you open a Support ticket, that way they have contact information to reach out to you directly and not via THWACK. It's in our tracking system as LEM-3543.

I don't think we have a connector for flat files for Panda Cloud, so that would be a connector request. Informix (whatever it is, SNMP or syslog) will be a new connector.

You could also deploy a Patch Manager automation server on a Windows 2008 box and create a routing rule in Patch Manager to have all WOL tasks sent to that box for processing instead of having the 2012R2 box do it. Automation servers are also useful for other things, like using Patch Manager to update Patch Manager!…

There is, but you'll have to make sure (at least in VMWare) that you have the option turned off that forces host synchronization: If that option is checked, than NTPConfig won't accomplish anything.

* Can you send a screenshot of the Email Active Response Connector you have configured under Manage --> Appliances --> Connectors? * Can you send a screenshot of your User from Build --> Users?

Once the feature request is sent to our development team, they will consider the request, and decide whether it will be implemented. You may also post your request to the Thwack forum forLEM. Thwack Feature Request forums are here: http://thwack.solarwinds.com/community/feature-request_tht. Create a post titled “FEATURE…

Yeah, that's above my pay grade. I know NTA does a lot more as far as integration and dashboards with the flow data, and I don't know the long-term plans for flow in the LEM.