Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Log & Event Manager (LEM) > Can I monitor what changes are made in VM where LEM is installed?

Can I monitor what changes are made in VM where LEM is installed?

Table of contents
Created by Ezgi Muderrisoglu, last modified by MindTouch on Jun 23, 2016

Views: 7 Votes: 1 Revisions: 3


This article discusses the possibility of monitoring any changes made to the virtual machine which the LEM is sitting on.


LEM 6.2


LEM does not make a note of all the changes that occur in the VM itself. We would recommend that the ESX host be monitored as well, and depending on the logs that it sends to LEM, then rules can be put into place.

Locate which events are logged into LEM once the ESX host is logging and integrated with LEM monitoring.

Then you can build rules based on the event that you would like to monitor, and in turn include the action you would like to take.

For example: Action: Email notification added to rule that looks for specific event logged by the ESX host.


Last modified
19:55, 22 Jun 2016