Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > Change the LEM Manager associated with LEM Agents

Change the LEM Manager associated with LEM Agents

Table of contents


This article provides brief information and steps to change  the LEM Manager associated with LEM Agents.


All LEM versions


LEM Agents use the spop.conf file to determine what LEM Manager to connect to when they're started. If you change the hostname of your LEM Manager or want to connect your LEM Agents to a different LEM Manager, you can modify spop.conf to direct your LEM Agents to connect using a new hostname.

Note: In cases where you change a LEM Manager's hostname and subsequently update its LEM Agents, there will be duplicate Agent entries in the Manage > Nodes view in the LEM Console. To fix this, delete the duplicate Agents using the Delete command under their respective gear icons.


To change the LEM Manager associated with a LEM Agent:

  1. Stop the SolarWinds Log and Event Manager Agent service.
  2. Delete the spop folder (do not delete the ContegoSPOP folder):
    • 32-bit computers: C:\Windows\System32\ContegoSPOP\spop
    • 64-bit computers: C:\Windows\SysWOW64\ContegoSPOP\spop
  3. In the ContegoSPOP folder, open and modify the spop.conf file.
    1. Replace the ManagerAddress value with the new hostname.
      Note: You can also use an IP address here, but we recommend using hostnames to decrease the maintenance impact of changing the IP address of your LEM appliance.
    2. Save and close the file.
  4. Start the SolarWinds Log and Event Manager Agent service.

Your LEM Agent will automatically connect using the new hostname within a few moments.


Linux and Unix

The procedure for Linux and Unix is as follows:

  1. Stop the LEM agent.
    /etc/init.d/swlem-agent stop
  2. Switch to the installation directory
    cd /usr/local/contego/ContegoSPOP
  3. Delete the spop folder
    rm –rf spop
  4. Edit the spop.conf file to specify the correct manager IP
  5. Start the LEM agent
    /etc/init.d/swlem-agent start
Last modified
21:26, 26 Jan 2016