LEM to monitor for Network Policy Server errors?
Currently, we use LEM heavily for identifying account lockouts/bad password attempts. I currently use this search in nDepth to find them: ( "Event Name" = UserLogonFailure ) AND ( DestinationAccount =...
View ArticleClik here to view.
Re: LEM to monitor for Network Policy Server errors?
Figures, after I submit this question I figured out the answer myself. In nDepth I created this search: ( "Event Name" = UserAuthAudit ) AND ( ( "Event Name" = UserAuthAudit ) AND ( EventInfo =...
View ArticleRe: After an undetermined period of time LEM 5.6.0 stops providing real data...
Thanks for the replys, I would have replied sooner but i've only returned to work this week. In response to Gareth we are runnining LEM on a Raid 5 array and do have quite a high number of events so it...
View ArticleClik here to view.
Re: After an undetermined period of time LEM 5.6.0 stops providing real data...
Ian, If you are able to plan in the change from RAID 5 array to RAID 1+0 for the datastore hosting the LEM appliance, I strongly recommend this. If this is not feasible of course, then you will need to...
View ArticleRe: After an undetermined period of time LEM 5.6.0 stops providing real data...
Hi Gareth, at present I don't think we would change the array from its Raid 5 setup at present but would obviously consider to do so as a last resort depending upon the success of 5.7.0 over the next...
View ArticleClik here to view.
Re: After an undetermined period of time LEM 5.6.0 stops providing real data...
Hi Ian, This is common with virtualised environments and is due to the hardware clock skewing, resulting in the time drift. The guest VM relies on the timer ticks value being consistent, but this...
View ArticleHas anyone configured the LEM Directory Services Connector to use RedHat IPA...
In the environment I'm working in, we don't have AD servers, but we do use Red Hat IPA/IdM for *nix SSO. I'm wondering if anyone's gotten IPA working for Directory Services users/groups in LEM.
View ArticleClik here to view.
Please help! Server doesn't have Local Security Policy on it!
I can't seem to find it and it's a file server. I'm trying to prove we don't need to buy an additional Application and use LEM instead. Server is a Windows 2003 R2 SP2. I can use all the help I can...
View ArticleClik here to view.
Calling all LEM Champions
Are you a fan of SolarWinds Log & Event Manager? Looking for ways to earn more thwack points? We have urgent needs for all of you LEM champions. The feedback process will take approximately 45...
View ArticleIs IIS 8 supported yet? If not, is there a way to make it work?
I've already tried using the IIS 7 connector, but it doesn't seem to want to start due to an error.
View ArticleClik here to view.
Re: Please help! Server doesn't have Local Security Policy on it!
Out of curiosity, if you open a command prompt and run RSOP (Resultant Set of Policy) on your file server, what comes back? Server 2008 and 2012 have a cool command in auditpol /get /category:* which...
View ArticleApplications and Services Monitoring
Hi Guys, Recent LEM user here I've notice out of the box LEM doesn't monitor the logs in the Applications and Services Monitoring folders of event manger? I did a quick search and found that this is...
View ArticleRe: Is IIS 8 supported yet? If not, is there a way to make it work?
Nathan, can you post the exact error you're getting when attempting to use the IIS7 connector?
View ArticleI need to monitor Orion Uptime...
I have multiple datacenters servicing customers across the time-zones in the U.S. and also in the U.K. each datacenter houses about 10 to 25 pieces of mission critical schizzle that we use...
View ArticleClik here to view.
Re: Is IIS 8 supported yet? If not, is there a way to make it work?
I've seen a couple errors. The first occurs when the log file path is configured in these ways:...
View ArticleOrion U.S. monitors uptime of Orion U.K.
Is it possible to have Orion in one datacenter manage the up-time of Orion in another datacenter?
View ArticleSupported IDS/IPS Sensors/Apps
I'm looking for a list of supported IDS/IPS sensors and related applications (Snort for example), that the LEM supports? A future project is to replace our EOL IDS sensors with new technology and I...
View ArticleRe: Supported IDS/IPS Sensors/Apps
You can see a list of supported data sources HERE. Hope that helps!
View ArticleRe: Supported IDS/IPS Sensors/Apps
Perfect thank you. Not too excited about learning that SourceFire was acquired by Cisco. ~Steve
View Article