Re: User Logon/Logoff (evt ID 4624/4634) with multiple DCs
I've had some luck exporting and filtering based on the UniqueID, but I can't find a way to filter that at reporting time within nDepth. Is that field exposed to the nDepth tool?
View ArticleLEM Filters / Rules - Monitor for software installation
Hello, We are trying to configure a Filter (and later a Rule) in LEM (ver 6.1) that will alert when any software is installed on a Server/ Work station on which a LEM agent is installed. We are...
View ArticleOdd answer from Support
All, I'm going to relate an odd answer that I got from Support last week. We have a number of Apache 2.2 web servers running on Win 2008 servers. I was attempting to set up connectors for the...
View ArticleRe: Odd answer from Support
I see you are using quite an old version of Apache.Any mentions from Support of using a current version like 2.4.18
View ArticleRe: LEM Filters / Rules - Monitor for software installation
There's a Template rule for Windows Update Failure that you might want to look at. The LEM normalizes a class of events as "SoftwareInstall" so looking for those events ought to show you installs....
View ArticleRe: Odd answer from Support
I'm assuming there's a LEM agent on the Windows 2008 box, which makes it very strange that the LEM appliance would slow to a crawl. It may be that the Agent is reading the log files, and sending...
View ArticleRe: LEM problem with browsers
I use Opera as my browser and it works well. IE11 also seems to work without issues for me on Windows 10.
View ArticleHelp troubleshooting duplicate email alerts
I am having difficulty troubleshooting my email alerts. I have gotten the email templates setup correctly and all of the information looks good (using account modification email template and I added...
View ArticleRe: Help troubleshooting duplicate email alerts
Okay, easy question first: yes, you can find out what is sending you e-mail.Go to Explore --> nDepthOpen the "Events" drawer and find "InternalRuleFired." Click on this.Pick the "ExtraneousInfo"...
View ArticleRe: LEM problem with browsers
That's weird. I spend all day demoing LEM to people, and I use Chrome for it with no issues. When I did Support on LEM, we were aware of the IE7-10 compatibility issues, and the behavior of sitting...
View ArticleRe: 6.2.0 Update Issues
Just saw the same. After entering my username/password, was prompted to accept end user license agreement (almost like it was the first time I'd ever logged in). once in, all default widgets were...
View ArticleRe: 6.2.0 Update Issues
They're version specific, but you should also look at setting up the configuration backup. That captures the user-settings (and other things), and while the customer accessible restore feature is very...
View ArticleRe: Help troubleshooting duplicate email alerts
Curtis, Thank you for the wonderful response. I did follow your suggestion for nDepth to see which ones were sending out emails. However, it did not return any results. Here is a screen shot:I ran it...
View ArticleRe: Help troubleshooting duplicate email alerts
Cool. It looks like you need o add the wild-cards to that search and it should work. *email*
View ArticleRe: LEM Hardware specs for 150 Million+ events a day
I have a server with 7.2k SaS HDD, 128 gigs of Ram and 100 million events a day, works great!
View ArticleGeneral Guides I wrote up for performing some basic LEM tasks
My company just purchased LEM. While learning how to use use it and getting it set up, I had some initial trouble learning how to perform some tasks that may not be terribly basic, but also are not...
View ArticleRe: Using a Threat Intelligence Feed with LEM?
Hello, Since threat intelligence feed is now part of LEM 6.2 I'm looking for a way to learn more about this new feature, SolarWinds manual has limited information. Does anyone know where I can find...
View ArticleRe: General Guides I wrote up for performing some basic LEM tasks
Did you look at the eval guide http://www.solarwinds.com/documentation/LEM/Docs/LEM_Evaluation_Guide.pdf ?
View Article