Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Can not get any rules to fire in LEM - What am I doing wrong?

$
0
0

Well as the title says I'm not having much luck with getting any rules working in the LEM console. I have tried making some rules using the LEM video guides and Im pretty confident that I have created them correctly. Failing that I tried using some of the templates provided incase it was my fault such as the notification when USB defender service is disabled which will send an email alert. I used this template and added my account to recieve the emails and ensure that the Activate rules button has been clicked. Once i disable the service nothing happens, the service stopping is picked up in the Ndepth monitor but the rule is not firing to notify me.

 

Here is the rule used for the USB Defender Service stopping

USB_Service_rule.PNG

I have the email settings correctly configured as any test emails are sent to my address so I'm really at my wits end on why it won't work. Infact non of the rules from any of the templates even show up as being fired in OPS Center dashboard.

 

Please note that we are currently on an evaluation of this software so it did cross my mind that it may be this thats stopping the rules but it seems silly that these would be disabled.


Viewing all articles
Browse latest Browse all 5385

Trending Articles