Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Browsing all 5385 articles
Browse latest View live

Re: Issue with custom LEM report

Here's what I ended up doing (their support amounted to do everything within the Reports application "...if you're using Crystal Reports, you're on your own" and though I asked what tools their...

View Article


Re: InternalUnknownAgent SolarWinds Alerts???

If I recall correctly, I've seen this happen when you install the agent, it reports to the LEM, and then sometime after that the agent's entry is deleted from the LEM appliance. When the agent reports...

View Article


Re: Move filter into group?

Anyone?  Beuller... Beuller... Beuller...

View Article

Wildcards in conditions

Hi, Within in ndepth, how can I search for results which contain a word.  For example looking for accounts which are enabled or disabled whilst containing *adm* produces the example account which...

View Article

Error: Search finished prematurely

  Aside from what the words say, what does this mean with regard to problems with the LEM?  I got this for the first time today.

View Article


Log Print Success

I have a requirement to log print success.  On our print server I can see individuals printing and whether they are successful or not. I have the agent installed on our print server (Windows 2008R2)...

View Article

Re: Wildcards in conditions

Anyone please? Specifics of this situation: adm1badmbadmc Using UserDisable.DestinationAccount set to "*adm*" only produces results for adm1 even though all are disabled at the same time. How can I...

View Article

Re: LEM Logging RSA Authentication Manager on Windows

Did you ever get this sorted? SW - is this something that can be done in the way described by thefish?

View Article


Re: Potential Bug - LEM 5.6.0 User Defined Group Creation with multiple...

This is not a limitation of the trial, it is a bug. The easiest workaround is to connect to a single appliance (on first connect, so the list is only showing the one you want to add to). I will make...

View Article


Re: lack of data

Garreth's advice is helpful here. Agents still connected, still configured? Event logs aren't full if you're monitoring event logs? License hasn't expired (that will also stop data from coming in)?

View Article

Re: In-line filter of Windows events from LEM agent

This looks like Audit Process Tracking - Success is enabled on your system. You can turn that off in the Windows Audit policy and they won't get generated at all (in the event log or coming to LEM)....

View Article

Re: How to set on LEMwhen the network loop happen

The nodes that appear in Manage > Nodes are the same that appear in the "DetectionIP" field of the data. If you look up a node in the node details dashboard in Ops Center, it does try to search on...

View Article

Re: SAP event and audit log in LEM

Heiko, I don't think we have any SAP connectors. If there's an audit log that would be helpful to track, we can put in a new request.

View Article


Re: PC logs InternalAgentOnline/Offline Constantly

This can be systemic of agents that are copies of each other - say if two systems were imaged with the same image, but the certificate stores weren't cleared first. When two identical certificate...

View Article

Re: Netapp SnapMirror Logs

We have requests for Snap Manager and Snap Drive, but not Snap Mirror - do you know where it logs? The other two log to the Windows Event Log.

View Article


Re: Error: General: search ended prematurely

I replied to another thread on this subject with some info - Re: Error: Search finished prematurely

View Article

Re: is agent multithreaded

On the system, there should be a "SWLEMAgent.lax" file inside the agent install directory (regardless of platform). Within this LAX file are some configuration parameters. You're looking for the...

View Article


Re: is agent multithreaded

Most excellent.  I've put a ticket in so my Linux team can tweak.  I'll post here when determine effect.Thanks!

View Article

Re: lack of data

Geff, I have seen this myself on a new install of LEM 5.6.0 using the desktop console and web console. It only occurs the first time I log in to the appliance. Once I logout, close the console...

View Article

Re: In-line filter of Windows events from LEM agent

Nicole, Thanks for responding. I am new to LEM and getting to grips with its features. I am curious if it is possible to filter out these events through the appliance policy, like the kb article...

View Article
Browsing all 5385 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>