Re: Lem, can you move an nDepth search into a rule?
thump, no you didn't miss anything. You can however send a filter to nDepthYou may want to vote for this idea Allow LEM filters to be sent to Rule Creation
View Articleextend LEM disk space
Hi all I want to know how to upgrade LEM disk space if its full., will LEM recognize the extended space or will I have to do some settings on LEM manager so it can refresh with the new extended disk?,...
View ArticleRe: extend LEM disk space
knowledgebase.solarwinds.com/kb/questions/3717It should be automaticYou cannot delete old data to free up space
View ArticleClik here to view.
How to get the LEM to recognize special characters in a filter or rule...
The Lem does not appear to recognize special characters within an event data field; an underscore for example. I am using nDepth to search the Windows UserLogon.DestinationAccount field for account...
View ArticleClik here to view.
Re: How to get the LEM to recognize special characters in a filter or rule...
I am having the same issue with "$". Specifically, I'm trying to create a rule that shows all user accounts enabled but want to filter out workstations - which always end with "$". The example below,...
View ArticleClik here to view.
LEM Keeps finding "0" account which doesnt exist?
I have a rule in LEM set up to tell me anytime an account fails to log on to a system. For the longest time since the rule was turned on, LEM keeps recording an account called "0" which is attempting...
View ArticleRe: LEM Keeps finding "0" account which doesnt exist?
Short term: Add an exception to the rule for "AND UserLogonFailure.DestinationAccount DOES NOT EQUAL 0" to keep the rule from firing erroneously. Medium term: Search the logs in nDepth, look for all...
View ArticleRe: extend LEM disk space
If you need more space, shutdown the appliance, increase the disk space up to 2TB, then power on the LEM. LEM should recognize the increase in disk and auto configure. LEM is a SEIM and does not allow...
View ArticleRe: F5 ASM and LEM - is there a connector?
Not that I know of. You can always request SW to make a connect for it. Typically by opening a case, have the device send syslog to an empty local, then export the syslog and send that to SW.
View ArticleRe: F5 ASM and LEM - is there a connector?
Yeah, we figured that would probably be the case...that's for confirming cscoengineer!
View ArticleNode discovered with wrong connector
Hello! I recently got Patch Manager squared away (mostly) for our network, so I've moved on to learning LEM and getting it set up with our network. I have a feeling I'm going to be asking a llloootttt...
View ArticleRe: Node discovered with wrong connector
I have the same issue with HP 2520's adding the Mikrotic connector and the Dell Equallogic connectors.
View ArticleRe: Node discovered with wrong connector
First: The device you're messing with is actually going to be parsed under the PIX/IOS connector for LEM. CatOS is for legacy devices running the Catalyst Operating System (which even the Catalyst...
View ArticleRe: Node discovered with wrong connector
Ahh; thanks! It did discover the PIX/IOS connector all on its own a little bit later (which just made me even more confused, until I read your reply) so I guess it just needed a bit more logs before...
View ArticleRe: Node discovered with wrong connector
Nope, it won't delete them, unfortunately. To clean them up: Manage --> AppliancesClick the gear next to the LEM in the list, pick "Connectors"You'll get a list of connectors. Click the gear next...
View ArticleClik here to view.
Brief duration event correlation
How would one go about creating a rule that alerts if a user account is created, then deleted before a certain amount of time has passed (e.g. 24 hours) ?
View ArticleCisco Connector is Not Showing Up
Everytime I add the node from my Cisco 3845 router the LEM server tells me it finds a tippingpoint node connector. When I disable the tippingpoint connector then LEM simply tells me it can't find a...
View ArticleClik here to view.
Re: Cisco Connector is Not Showing Up
This thread should help: Node discovered with wrong connector
View ArticleRe: Cisco Connector is Not Showing Up
Thank you, but it does not help. I spent quite a bit of time reading about this before posting, and I had already looked at that question. The above user had his cisco ios/IPX connector show up...
View Article