Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > How to collect various LEM Logs

How to collect various LEM Logs

Updated April 17, 2018


This article provides a brief overview of how to collect various types including LEM Appliance, Windows and Linux agent logs.


  • LEM 6.x and above


When troubleshooting Agent related issues get the Agent + LEM appliance logs


  • Windows Agent with LEM 6.3.1 HF1 and below
    • Get the spoplog.txt file located under C:\windows\syswow64\ContegoSPOP\
  • Windows Agent with LEM 6.3.1 HF2 and above
  1. Locate the file C:\windows\syswow64\ContegoSPOP\collectLogs.bat
  2. Right-click and select runas-administrator.
  3. Grab the resultant file created for Solarwinds support: C:\windows\syswow64\ContegoSPOP\
  • Linux / Unix Agents
    • Get the latest spoplog.txt file located under
      • Linux/Unix: /usr/local/contego/ContegoSPOP/
      • Mac: /Applications/TriGeoAgent/
  • Report Logs
    • When troubleshooting reports related issues it is always good to get one or two sample reports + Report Logs + LEM Appliance logs
    • Enable logging for LEM Reports:
      1. Right-click on the Reports icon and select "Properties".
      2. In the "Shortcut" tab, add /L at the end of the "Target" field, for example:
        C:\Program Files (x86)\SolarWinds Log and Event Manager Reports\SWLEMReports.exe /

Please collect and send the files:

  • C:\Program Files (x86)\SolarWinds Log and Event Manager Reports\SWLEMReports.log

  • C:\Program Files (x86)\SolarWinds Log and Event Manager Reports\crystaljrc.log


LEM Appliance Logs

  1. If you connect to your SolarWinds SIM via SSH you must have your cmc password of your LEM / SIEM appliance and IP address or hostname of your e-mail server. If connecting via VMware Console to your SolarWinds LEM you do not need the cmc password.
  2. Using an SSH client or VMware console connection connect to your SolarWinds appliance(s).  If using SSH, you must connect on Port 32022. Log in with your the username of 'cmc' and the cmc password.
  3. Type: manager and press Enter.
    This takes you to the manager sub-menu.
  4. Type: debug and press Enter.
    This starts the debug script.
  5. You can either e-mail the debug to yourself and then forward it on to SolarWinds Support, or write it out to a network share. (network share example \\\c$) You will need a domain, username and password that have to write privileges at the network share location.

If the debug files are less than five megabytes, please attach them to your reply to this e-mail. That will ensure that they are connected to your support case.

If the debug file is larger than 5MB please do the following:

  1. Open your browser and navigate to
  2. Click on the link labeled Secure Upload.
  3. In the Recipient Email box put
  4. Enter your name and email address.
  5. In the subject line field put "Attn <agent name> case # <case number>". A subject is required to move to the next page.
  6. Click the link for Select files to send (Regular Upload). The Enhanced upload can take a long time so please do not use this option.
  7. Add any instructions to clarify for the SolarWinds tech how to use your files.  
  8. At the bottom, click the button for Select files to send (Regular Upload).
  9. On the next page, attach the files you want to send.
  10. Please include any screenshots that you consider relevant to the case.
  11. At the bottom click Upload & Send.


Note: The Leapfile system does not notify your SolarWinds agent that they have files available. Please send your support representative an email to let them know that your files are waiting.



Last modified