jessaraea

Considering my concern for the devices the LEM manages are internal (with the exception of a select few) how would you suggestion I transition off the UDLP to the White-list to not cause inconsistencies? Considering how many lines of data i would be importing from the txt file for the UDLP I have is there another method to…

Ohhhh! I apologize for missing that through the user-guide/reading and this conversation - I did not know that was the key difference between the two lists I thought they were just different means to an end. And now it all makes sense. : )

I appreciate your help on this. Yes I have been using the monitoring tab quite a bit and can see when the rule applies. So far, if the the device IS on the UDLP list and that list has been applied to the connector it works. What issue are you thinking that I am having? As far as i am concerned, everything is working…

Thanks for the reference sheet. The Approved USB Device list is on my LEM. The UDLP white-list is on my notepad document and imported. Currently, my Approved USB Device list is empty, the UDLP white-list is my primary resource. So this leads me to what you just said: "The device MUST be in the UDLP white list otherwise it…

Thanks! The KB's are great. It's been a little bit since i originally posted this but by trial and error and watching some videos on the LEM I have made some headway. My teammates within infrastructure are working on the reason for those logs and yes - it makes sense that the LEM wouldn't be able to clarify those details.

Thank you for getting back to me on this. This is absolutely the type of learning curve that when you eventually 'get it' it clicks perfectly. Otherwise - it's almost a foreign language. I finally had a chance to look at this again and work through it logically. I believe I have what i want for the time being. I think…

Hey Wolram - thanks for getting back to me. Initially I was pulling the list of machines and their corresponding LEM Agent version from our KACE appliance. I connected to a handful of the devices and checked their Control Panel to see what version was showing and that's where i confirmed that KACE was reporting what their…

If i am understanding you correctly then i think therein lies my problem. What i was trying to do was NOT block any of my Smartcard readers internally by setting an exception and not having to add those serial numbers to the list. Perhaps if i tell you exactly what i am wanting to do you may have a suggestion. I want ALL…

curtisi​ - you rock! I actually didn't even realize i could search for actions on rules being fired. I clearly need to sweep through the events sometime and wrap my head around the possibilities for nDepth espeically and therefore rule creation. Thanks for your help!

On this note, we have a primary and backup DC. In the event one is down and the other is up - can I somehow add that to the field as a wildcard seeing as their naming conventions are only one character off or will that not allow the rule to action correctly from the start?

You nailed it by stating the appliances limitation. We were wanting to limit what data is saved - by type not by date. As some of our government requirements expect certain logs to be retained longer then others and our backups are massive we were looking for processes to minimize the size of our daily backups and were…