Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Set up Officescan syslog messages with LEM

Set up Officescan syslog messages with LEM

Table of contents
Created by Ezgi Muderrisoglu, last modified by Cory Farr on Feb 08, 2019

Views: 1,709 Votes: 0 Revisions: 6


This article provides information on how to set up Officescan application sending syslog to LEM.


  • all LEM versions
  • Officescan version 11


Note:The TrendMicro Officescan connector is available under the agent, but under the 'manager' connectors.
Open LEM console > Manage > Nodes > click on the Gear icon of the machine agent where it installed, and then click Connectors.


A. Confirm the syslog sending:

  1. Confirm that the Officescan is configured correctly to send log data to Windows Application log by opening this log from within Windows Event Viewer. If Trend events do not appear in the Windows log,  LEM connectors cannot get them.

B. Confirm the integration of the Windows server and LEM:

  1. Install LEM agent on the Windows server that is hosting the Trend Micro anti-virus. Be sure to install the agent with runas-admin for the install, which give the agent permission to send events to LEM..
  2. Once the Windows server is added/integrated with LEM, the server name should appear on the list of Nodes on your LEM console. 

C. Set up the Connector:

  1. Select the node with this server name. 
  2. Click on the gear icon.
  3. Click on connectors.
  4. For this node, the Officescan connector appears on the list.
  5. Once you have located the Officescan connector, configure the details accordingly with the same location where the syslogs are being sent to (will be the Application log).



Last modified