Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 8

SEM / LEM rule creation basics

Hi there...I have worked on LEM before, but its been awhile. I am trying to find if I create a rule and not specify a group to target for systems or users, will that rule apply for every nodes thats added in the LEM ? Can you please advice me in that ? I have been watching videos about creating rules, but when tried to search for that specific part of rule creation, I couldnt find. Hence please let me know. Appreciate your input.

Labels (1)
0 Kudos
3 Replies
Level 8

jrouviere​, thank you for your reply.​, it was just a general question, but didnt have any specific clarification in a rule.

Level 14

Sounds right.

Take a simple rule, logon failure. If you specify the event type, but nothing for source/destination machine, etc, it will apply to every machine/group.

If you want to limit it to a specific group, you need to add that into the rule correlation.

Level 9

I advise posting a screenshot of your rule.