Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > How to identify who modified a rule or group in LEM

How to identify who modified a rule or group in LEM

Table of contents

Updated: October 23, 2017

Overview

This article describes how to identify the user who modified a rule or group in LEM. 

Environment

  • All LEM versions

Steps

  1. Log in to the LEM Console.
  2. Create an nDepth query using the following search parameters:
    InternalAuditSuccess.EventInfo=*Modify*
    Rule_or_Group_Modification_Search
  3. Save your query

 

 

 

 

Last modified

Tags

Classifications

Public