Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Browsing all 5385 articles
Browse latest View live

Re: After upgrading the LEM 6.1 to 6.2 version, IP not working

Hi Harish I'm going to move this into the LEM forum so you can get some technical assistance from those using this particular product.

View Article


Re: After upgrading the LEM 6.1 to 6.2 version, IP not working

I imagine that it's similar to this issue: Hyper-V Network Issues Support should be able to resolve this.

View Article


Re: LEM 6.2 Rollback Plan

As far as the upgrade goes, is this document not sufficient?http://www.solarwinds.com/documentation/LEM/Docs/SolarWinds-LEM-UpgradeGuide.pdf As for a roll-back, I'd think the easiest plan would be to...

View Article

LEM 6.2 Backups Stopped Happening

Has anyone else had your archiveconfig, backupconfig, and logbackupconfig stop working.  All of these stopped working on our three LEMs that we upgraded last week.  I have three different accounts...

View Article

Re: LEM 6.2 Rollback Plan

Good Looking, thanks for the information. However my quandary is we can not do backup, due to an NTLM compatibility issue. We are on a network than only support NTLM version, our current version of...

View Article


Re: LEM 6.2 Rollback Plan

So can you snap-shot your VM and back that image up instead of using the LEM backup mechanisms?

View Article

Re: LEM 6.2 Rollback Plan

Classification: UNCLASSIFIEDCaveats: NONE Yes that what we are doing Regards,Trey

View Article

Image may be NSFW.
Clik here to view.

Re: LEM 6.2 Backups Stopped Happening

I've got a little more info now.  This is a cifs share which I can use the same svc account and map to the share from a windows machine.  However when I try through archiveconfig I get a "Detected an...

View Article


Connecting to file share broke in 6.2

In 6.1 I had backup and archive backups configured to go to a CIFS share \\server\backups\LEMEver since I upgraded to 6.2 this fails if I change the path to \\server\backups I can connectIt does not...

View Article


Image may be NSFW.
Clik here to view.

Filter NT Authority\System

I am running 6.2.0RC1. I have FIM running on a file server and pointing to one folder. I get a lot of events with NT Authority\System in it. One file opened creates 8 events. 5 of 8 are from...

View Article

Re: LEM 6.2 Rollback Plan

Have you opened a ticket with Support on this yet?  If NTLMv2 is somehow broken in 6.2, we'd need the Support history so the issue can be diagnosed and sent to our developers for resolution....

View Article

Re: LEM 6.2 Backups Stopped Happening

Have you opened a ticket with Support on this yet?  If NTLMv2 is somehow broken in 6.2, we'd need the Support history so the issue can be diagnosed and sent to our developers for resolution....

View Article

Re: Connecting to file share broke in 6.2

Have you opened a ticket with Support on this yet?  If NTLMv2 is somehow broken in 6.2, we'd need the Support history so the issue can be diagnosed and sent to our developers for resolution....

View Article


Image may be NSFW.
Clik here to view.

Re: Filter NT Authority\System

Take out that first line that just says "File Audit Alerts".  It'll fix the issue. You have an OR on that section of the rule (the orange stripe means OR), so the LEM is grabbing everything that is a...

View Article

Image may be NSFW.
Clik here to view.

Re: Filter NT Authority\System

that worked. I thought the other bar said AND.I thought the big bar was for an other set of conditions but I just realized you cannot create another set of conditions.Still learning 

View Article


Re: Filter NT Authority\System

Also, and I see this a lot:You don't need to tell the LEM to look for "Thing" and "Thing.SpecificField."  "Thing" is implied by "Thing.SpecificField" so you only need the second thing. OK. Wanna make...

View Article

Re: Filter NT Authority\System

FileAttributeChange is included within the "File Audit Alerts" group, so specifying that something be a FileAttributeChange AND in the File Audit Alerts group is redundant.  This doesn't work the other...

View Article


Image may be NSFW.
Clik here to view.

Re: Filter NT Authority\System

With that filter in place I am not getting File deletes. The source account is not SYSTEM here. Its a user.I am trying to create a filter that shows file deletes, writes and creates but not show form...

View Article

"Schedule" greyed out?

  I must be missing something, but if so then the intuitiveness of this is in question. I've created an nDepth search which I'd like to Schedule to run daily. 1) I create the search and set the...

View Article

Re: "Schedule" greyed out?

Are you sure it says "Last Day" and not "Custom Range"? I confused myself on this some time ago because you cannot schedule a "Custom Range" and I failed to notice that the time frame shifted.

View Article
Browsing all 5385 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>