Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Browsing all 5385 articles
Browse latest View live

Re: Remembering passwords with 6.3.1

I have, and I have no idea why, I've just learned to type my username and password every time, and I do have LDAP integration configured.

View Article


Image may be NSFW.
Clik here to view.

Re: import Solarwind LEM Logs

Sandeep, First, you'll need to work with Support to get LEM logs restored for review, research and reporting.  It requires root access to the LEM appliance, and restoring logs (as of May 30) isn't...

View Article


Re: Supported Hyper-V for LEM

May I know what installer did u use? is it the virtual appliance only or the all in one package? Thank you.

View Article

Are the backups configured in the LEM CMC stored as compressed data?

I have recently setup our first of three different LEM's and want to setup the syslog backups via the CMC.  We have a requirement to store syslog data for 100 days. Since the LEM server has a limited...

View Article

Re: Supported Hyper-V for LEM

I used the AIO package.

View Article


Image may be NSFW.
Clik here to view.

Re: Are the backups configured in the LEM CMC stored as compressed data?

For future generations, the way to configure backups is described here: Configure Backups on your LEM Appliance - SolarWinds Worldwide, LLC. Help and Support The answer is "It depends," and the...

View Article

Image may be NSFW.
Clik here to view.

Re: Are the backups configured in the LEM CMC stored as compressed data?

I would agree with curtisi....write the data out to a file share to ensure you maintain the 100 days you need...we found out the hard way what happens when you fill up the LEM drive with backup data.

View Article

LEM - Ghost Nodes.

Hello, I have a problem what I haven't can solved, in LEM appears several nodes like this: (Imagen LEM.PNG)149192060000014919206040001491920581000... All nodes differents except for the seventh  number...

View Article


Image may be NSFW.
Clik here to view.

Re: LEM - Ghost Nodes.

This is most likely a connector that is seeing a certain field and mapping it to DetectionIP.  Ways to fix:1. Make sure your connectors are up to date2. Open a support ticket if your connectors are up...

View Article


Re: LEM - Ghost Nodes.

First off, the numbers look like Unix Epoch Seconds. Epoch Converter - Unix Timestamp Converter 1491920600000 = Tuesday, April 11, 2017 2:23:20 PM GMT First problem: it looks like something in the...

View Article

LEM external powered USB HD

We have a white list for approved devices. It works great for only allowing the approved Blu-Ray/DVD/CD burners, thumb drives, and USB floppy drives. If it is not on the appoved list the device is...

View Article

Re: LEM external powered USB HD

I would look at your Windows Application Event log for USB Defender events.  USB Defender will log to the Windows Application Event log everything that is told is seen by the operating system.  Inside...

View Article

Image may be NSFW.
Clik here to view.

Re: LEM - Ghost Nodes.

Thanks for help! First:Support told me about this it can be a problem of "Random Node Display in LEM" and they give me the URL: Random node displays in LEM - SolarWinds Worldwide, LLC. Help and Support...

View Article


How to collect log information from TM Officescan

I found a KB talking about how LEM collects TM Officescan log information. Set up Officescan syslog messages with LEM - SolarWinds Worldwide, LLC. Help and Support However, Officescan Server 11 doesn't...

View Article

Image may be NSFW.
Clik here to view.

Re: How to collect log information from TM Officescan

Hi Ray, Apologies for the inaccurate documentation, we'll get the KB updated. As per this Trend Micro KB, notifications are automatically sent to the Windows Event Log on the OfficeScan server. In...

View Article


Image may be NSFW.
Clik here to view.

Re: LEM external powered USB HD

Is shows up as a Rugged Raid under HD also shows up as a Portable Device under device manager. Under Application event log I see an event source TriGeo UBS-Defender. USB Device Attached Device ID,...

View Article

Image may be NSFW.
Clik here to view.

Re: LEM external powered USB HD

I think there are two critical things to understand about USB Defender: The first is, USB Defender doesn't allow or disallow devices to work on a system in and of itself.  All USB Defender does is...

View Article


Image may be NSFW.
Clik here to view.

Re: LEM external powered USB HD

Thanks curtisi that helps.

View Article

Re: Advanced Correlation and Email Alerts

Hi. Would you mind sharing what user field to add in Correlations alongside "FileDelete"?The rule is — if any single AD user deletes a file...

View Article

Re: Advanced Correlation and Email Alerts

I have the same question

View Article
Browsing all 5385 articles
Browse latest View live