Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Browsing all 5385 articles
Browse latest View live

FEATURE REQUEST - NCR, Radiator Connector

Hi All,I was directed here by a tech support agent for LEM.  I'm trying to get SW to help me create a connector for log events coming from our AAA server, which is a product running on a windows 2008...

View Article


LEM Manger Appliance Commands

Hello all, I am very new to LEM and really don't know that much.  Can someone point me to a guide of the commands available in the Virtual Appliance, what they do, and proper syntax?Thanks. gcar12

View Article


Re: LEM Manger Appliance Commands

The admin guide has an appendix with most of the ones you will ever need to use in it.  http://www.solarwinds.com/documentation/LEM/Docs/LEMUserGuide.pdf  Appendix E. Hope this helps!Chrystal...

View Article

Image may be NSFW.
Clik here to view.

Can not get any rules to fire in LEM - What am I doing wrong?

Well as the title says I'm not having much luck with getting any rules working in the LEM console. I have tried making some rules using the LEM video guides and Im pretty confident that I have created...

View Article

Re: LEM agent question

Well I figured I would try one more time before I open a support ticket.  We still have 3 or 4 agent machines that were connected to LEM at one time but for whatever reason refuse to re-establish the...

View Article


Image may be NSFW.
Clik here to view.

Re: LEM Report/Alert for Cisco ASA VPN Usage

Here's what I've came up with so far for the filter/nDepth to monitor connects/disconnects from VPN per ASA which will not include the L2L connections:...and for the rule to notify when a user has...

View Article

Re: Can not get any rules to fire in LEM - What am I doing wrong?

Try setting your 'Response Window' to 30 seconds and click Save instead of Apply and then Save (more on that below).  I just had my correlation time at the same settings as you and it wouldn't work.  I...

View Article

Destination Account does not equal Source Account

Is there a way to do this?  I would like to create a rule where changes made to an account were not made by the user of that account.  I think this, along with other criteria, will get me what I want,...

View Article


After upgrading to LEM 5.6.0, my rules disappeared!

So, I just upgraded to 5.6.0 today, after making a snapshot of my appliance, and I had a few custom rules, and a few default ones, and they're gone! (Of course the database is still migrating.) I don't...

View Article


Re: After upgrading to LEM 5.6.0, my rules disappeared!

*looks sheepish* I hadn't, um...cleared my cache for Firefox.  As soon as I did, I had the right version of the console, and all my rules were back. Nevermind.

View Article

Re: LEM Report/Alert for Cisco ASA VPN Usage

Nice. I've been trying to achieve the same thing with our network administrator. What needs to be configured from the ASA side to be able to get these events or are you getting these events from AD?

View Article

Reboot during 5.6 upgrade restarts migration?

We upgraded LEM from 5.5.0 to 5.6.0 this past Friday. When I came in this morning, it said I had a little under 2 days left for DB migration. I had to reboot the appliance this morning for another...

View Article

Re: LEM Report/Alert for Cisco ASA VPN Usage

These are coming from the syslog on the ASA.  Try this page; It goes over configuring Cisco routers, firewalls, IPS/IDS, etc.:  SolarWinds Knowledge Base :: Configuring Cisco Devices to your LEM Appliance

View Article


Re: LEM Report/Alert for Cisco ASA VPN Usage

I believe we did that already but I'm only getting ACL events from the ASA. I'll ask him to check that the logging level is set to debug.

View Article

LEM: Trying to tone down the noise

  So I'm going through the Monitor filters and I'm trying to get rid of some of the noise.  I don't understand why some of the rules are matching. For example, we have a webserver, and whenever the...

View Article


Re: Issue with custom LEM report

Since the upgrade to 5.6, even the scheduled stock reports do not run.  Tried opening them in Crystal, but get LEM Reports Error: "Logon failed. Database Vendor Code 210" when the report tries to...

View Article

Re: Help us out - check out the LEM online demo

Hey everyone, we're baaaaack! We've been updating the demo to our latest LEM release and adding a little login splash screen for the demo viewer's viewing pleasure. It would be awesome if any of you...

View Article


Re: Help us out - check out the LEM online demo

Looks good in IE 8 and Firefox...

View Article

Re: Help us out - check out the LEM online demo

Working GREAT in IE9.

View Article

Re: Help us out - check out the LEM online demo

Working well in Chrome.

View Article
Browsing all 5385 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>