Security Compliance

SEM does not show previous logs for a newly added node

This article provides brief information on SEM not showing the previous week's logs for newly added nodes.

First published date

10/10/2018 4:28 PM

Last published date

5/28/2019 7:09 PM

Overview

This article provides brief information on SEM not showing the previous week's logs for newly added nodes.

For example, A node was added Friday, but the logs from Monday to Thursday do not show.

Product section

Security Event Manager

Resolution

Is your node sending logs regarding any events from the previous days, or just day by day information?
Think of SEM as a translator, it is designed to translate the logs sent by various devices, into a readable format for you on the SEM console.
It will not actively ask for information from a node, SEM will instead wait for the node to send in it's log information that it needs translated and saved to the database.
If the target node is not sending the information of the previous days to SEM, then SEM is not aware of any information from the previous days.
It will only know what information the node shares with it.

If you would like to make sure that previous days information appears in SEM, then make sure that the node is sending the information to SEM to record and normalize (translate).
Learn more about configuring your devices to send events to SEM here.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.