Security Compliance

What happens when a node is deleted in SEM?

This article discusses what occurs when you delete a node in SEM.

First published date

10/17/2018 10:22 AM

Last published date

10/17/2018 10:22 AM

Overview

This article explains what happens when a node is deleted in Security Event Manager (formerly Log & Event Manager).

Product section

Security Event Manager

Resolution

When a node is deleted from the node list, the data for that node is not removed. It will be stored in the SEM database until it is eventually rolled off due to its age - so it's treated as any other of the events stored in SEM.
If a syslog node is removed, it is only removed from the node list. If another log from that device is received, the node will be re-entered into the node list.
If an agent node is removed, the connection certificates will be deleted and the agent may need to be reset on the agent machine.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.