Quantcast
Browsing all 5385 articles
Browse latest View live

Re: Error: General: search ended prematurely

We experience the same problem and generally a bounce of the manager service brings everything back up.  Annoying to say the least.

View Article


Linux Agent Log File Location?

I don't currently have a system to test on but need to help out a customer, can somebody point me to where the log file is for a system running the Linux Agent?  I am having some issues and wanted to...

View Article


Re: Linux Agent Log File Location?

I believe its installed to /usr/local/contego/ContegoSPOP

View Article

Re: Linux Agent Log File Location?

Awesome, thanks so much!

View Article

Rule creation in LEM is confusing...

I've been trying to take some the the filters I've created in LEM and are now looking to use the same logic and us it as a rule. My filter is as follows: ( "Event Name" = PolicyAccess ) AND ( ( "Event...

View Article


Image may be NSFW.
Clik here to view.

Re: Rule creation in LEM is confusing...

If I'm understanding you correctly, it seems like the following screenshot will fit your requirements 

View Article

Re: Rule creation in LEM is confusing...

ok, so everything within the correlations box is subject to the AND condition? what if I require an OR nested within that?

View Article

Re: "Exception_Logged" error when trying to create email alert for rule

Have you checked your SolarWinds Alerts filter for any events that related to the Exception Logged error?

View Article


USB blocking

Hello, I currently have USB blocking in place and have a whitelist for authorized USB devices.  My problem is when I add a USB device to the whitelist it is usable on all machines.  How do I restrict...

View Article


Re: Rule creation in LEM is confusing...

Everything in the parent Correlations group is subject to the operator on the right hand side. Triangle represents the AND operator, half circle represents the OR operator. You can click on the shape...

View Article

Re: "Exception_Logged" error when trying to create email alert for rule

I've looked under Monitor, looking at LEM Internal Events and don't see anything related to this.

View Article

Re: USB blocking

Create a UDG with the DetectionIP of the one machine. Create a UDG with only the whitelisted device. Add a new AND Group to your Correlations box that contains [DetectionIP does not contain the UDG...

View Article

Re: USB Defender and Android Smart Phones

I have the same problem too, USB Defender does not detect the new Iron Keys as well.  I started using the USB Defender Extended and it was able to detect all Androids and the new Iron Keys.  But the...

View Article


Re: TripWire Connector: How to use?

In case anyone runs into a similar issue with this.  Tripwires documentation shows that instead of using syslog their default facility is user.log.  However even after adjusting our connector still no...

View Article

Re: IIS 7.5 W3C Log Collection

Thanks! #4 worked for me too!

View Article


Deploying LEM through Group Policy?

I have been tasked with deploying Log Event management agents through group policy to all of our machines. I also want set set the log levels so we don't get flooded with non essential logs. We do not...

View Article

IIS 7.5 log time discrepancy

I recently started using the Microsoft IIS W3C v7.0 connector to monitor IIS logs on a server. Initially, there was a 5 hour discrepancy between the Insertion Time and the Detection Time. (Detection...

View Article


Re: Issue with custom LEM report

I continue to have problems with Reports taking a very long time to run and in come cases never completing.  I have two different LEM systems in different environments and I am having this problem in...

View Article

Running Multiple Reports at Once?

I am curious if there is an issue with running multiple reports at once?  I am looking at a setup that would require running multiple scheduled reports at the same time and I am curious if this would...

View Article

LEM Report/Alert for Cisco ASA VPN Usage

We would like to create a report for VPN logins/logouts and also have a real time alert for when someone is logged in or out.  The device is a Cisco ASA.  Any help on whether this is possible or not...

View Article
Browsing all 5385 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>