Security Compliance

User Defined Groups have gone missing or lost custom values after upgrading SEM

After upgrading SEM, one or more of your User Defined Groups, such as Authorized USB Devices, in your console have lost their custom values or are restored to default.

First published date

11/29/2018 10:56 PM

Last published date

11/29/2018 10:56 PM

Overview

Problem statement: User Defined Groups with custom values revert to their old values after upgrading Security Event Manager (formerly Log & Event Manager).

Product section

Security Event Manager

Cause

SEM restores default groups to their original settings during an upgrade. Any group that is included with SEM and that uses the same original group name is a default group, for example: Authorized USB Devices.

Resolution

To prevent a group with custom values from being overwritten, clone the User Defined Group and give it a new name. Be sure to update any rules that depend on that group to point to the new group.

To restore a group that is lost during a SEM upgrade, please contact SolarWinds Support.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.