Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Browsing all 5385 articles
Browse latest View live

Re: Edit User Password and Profile

I am editing the standardized Admin Username.  Admins accounts created recently those individuals are trying to change their password.

View Article


Re: Explorer Command Agent - Default Agent selection not sticking

Support should have at least opened up a case for you on this one that way it can get tied to the known issue.  Also they may actually have a workaround for you too.

View Article


Image may be NSFW.
Clik here to view.

Repurpose old TriGeo LEM Dell R610, can't update BIOS?

Several years ago we transitioned from physical TriGeo LEM to SolarWinds virtual machine LEM.  We repurposed the R610 as-is to run VMware ESXi 5.0 and it's worked well since. I'm having trouble...

View Article

New Server

I am looking to address some issues we are experiencing with our current deployment. I am thinking the best way to approach this would be to deploy a new server with a only a few agents so I can work...

View Article

Re: New Server

Not sure if this is really what you're asking, but you could just swap IPs so that everything pointing to the old server now points to the new one.  That, I feel, would be the easiest way to do it....

View Article


Re: MS Exchange monitoring

Seeing this thread piqued my interest to see what it is that y'all are actually monitoring on your Exchange servers?  Just Windows Applicatoin/System logs?  Are you able to forward any Exchange...

View Article

Re: LEM - NetFlow & sFlow

I'm just going to throw in my $0.02 and say I think it would be awesome to have Orion/LEM integration.  I'm not much of a fan of using Flash, so if you could just throw a hook into Orion (an LEM tab)...

View Article

Re: Repurpose old TriGeo LEM Dell R610, can't update BIOS?

To confirm - the old BIOS was NOT proprietary - everything was off the shelf Dell stuff, we just set a BIOS password and some configuration options if necessary. One possibility, knowing Dell's...

View Article


Image may be NSFW.
Clik here to view.

Re: New Server

+1 to reusing the IPs as an easy option. If you backup and restore all of the configuration to the new appliance, it will have a record of all of the agents and be able to "take over" seamlessly. If...

View Article


Reporting on LEM

We are using Solarwinds LEM 6.1.0 and need some help with reports. I need to find out all the drives, folder, files accessed by a user. Please could you advise how the conditions and groups in nDepth...

View Article

Re: New Server

I sounds like the IP swap may be the way to go. You mention a command that can be used to connect the agents to another system, what is that command? Can it be used selectively? e.g. can I run another...

View Article

Re: File writes to a server or share

Let me know if you need any additional help with this.

View Article

Making LEM Alert/Fight Cryptolockers

Hello everyone, Looking through LEM, it seems that it should have the ability to fight cryptolockers by kicking the machine off the network/domain.Does anyone currently have rules setup to handle that?...

View Article


Alert if file is moved to specific folder

Hello everyone, Does anyone know of a way to set up an alert to monitor a specific folder?We have a lot of automated jobs and when one fails it sends a file into an "invalid" folder, so monitoring it...

View Article

Re: Alert if file is moved to specific folder

I resolved the issue.I put FIM into place on the root folder where the file is before it is assessed and moved, and I also put it on the Invalid folder. I used a test file to see which accounts moved...

View Article


Re: Edit User Password and Profile

Are you looking at the right "save" button.There are 2, one is on the right hand side in the middle and that is for adding an email contact.The second one is also on the right but at the very bottom.

View Article

Re: Reporting on LEM

Assuming you have FIM activate, it is pretty easy.Just use FileRead.SourceAccount = abc@def.com

View Article


Image may be NSFW.
Clik here to view.

Re: Reporting on LEM

Hi omar789 - I can't think of a way to do that offhand without FIM being enabled in probably an unreasonable number of places. Do you have any other SolarWinds products like Server & Application...

View Article

Re: Reporting on LEM

What is FIM and how can I find if I have FIM enabled. Sorry, kind of new to this.

View Article

Re: Reporting on LEM

omar789, FIM stands for File Integrity Monitoring. You can read more in the LEM Admin guide here.

View Article
Browsing all 5385 articles
Browse latest View live