Submit a ticketCall us

Training Class Getting Started with SolarWinds Backup - February 28

This course offers customers an introduction to SolarWinds Backup, focusing on configuring the backup technology, taking backups, data restoration and data security. It is a great primer and will get you up to speed quickly on SolarWinds Backup.
Register for class.

Home > Success Center > Log & Event Manager (LEM) > How to identify who modified a rule or group in LEM

How to identify who modified a rule or group in LEM

Table of contents

Updated: October 23, 2017

Overview

This article describes how to identify the user who modified a rule or group in LEM. 

Environment

  • All LEM versions

Steps

  1. Log in to the LEM Console.
  2. Create an nDepth query using the following search parameters:
    InternalAuditSuccess.EventInfo=*Modify*
    Rule_or_Group_Modification_Search
  3. Save your query

 

 

 

 

Last modified

Tags

Classifications

Public