Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: LEM MSSQL Auditor need more logs verbosity

$
0
0

First off, the official response is:

 

"SolarWinds have had customers request or provide additional trace auditing, but SolarWinds advised against capturing anything that might have actual query/insert data in it since that could be either stored in a log file (in plain text) on disk on the system and/or in the LEM database."

 

We really don't want LEM itself to have to be PCI compliant, for example, so we don't want the actual PPI data in LEM.

 

There's also the other piece of this to consider: The LEM Agent Connector for MSSQL Auditor.  The connector is what reads the SQL Auditor logs, and has been tuned to discard or ignore any data that isn't generated by our stock traces.  You may be able to make a Feature Request, but I doubt there's anything easily done in configuration to make the LEM accept all data.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>