Submit a ticketCall us

AnnouncementsChange Is Inevitable

Get valuable help when it comes to tracking and monitoring changes. SolarWinds® Server Configuration Monitor (SCM) is designed to help you: detect, track, and receive alerts when changes occur, correlate system performance against configuration changes, compare server and application configuration against custom baselines, and verify application and system changes.

Learn more.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > How to identify who modified a rule or group in LEM

How to identify who modified a rule or group in LEM

Table of contents

Updated: October 23, 2017

Overview

This article describes how to identify the user who modified a rule or group in LEM. 

Environment

  • All LEM versions

Steps

  1. Log in to the LEM Console.
  2. Create an nDepth query using the following search parameters:
    InternalAuditSuccess.EventInfo=*Modify*
    Rule_or_Group_Modification_Search
  3. Save your query

 

 

 

 

Last modified

Tags

Classifications

Public