Submit a ticketCall us

WebinarUpcoming Webinar: Know What’s Changed – with NEW Server Configuration Monitor

Change management in IT is critical. But, even with a good change management process, changes are too often not correctly tracked, if at all. The configuration of your servers and applications is a key factor in their performance, availability, and security. Many incidents can be tracked back to an authorized (and sometimes unauthorized) configuration change, whether to a system file, configuration file, or Windows® Registry entry. Join SolarWinds VP of product management Brandon Shopp to discover how the new SolarWinds® Server Configuration Monitor is designed to help you.

Register now.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Syslogs Node in LEM using wrong IP

Syslogs Node in LEM using wrong IP

Table of contents
Created by James Nielsen, last modified by MindTouch on Jun 23, 2016

Views: 819 Votes: 1 Revisions: 6

Overview

The way the LEM receives syslogs may cause the expected IP address to be different than the IP address used in the LEM.

Environment

All LEM Versions

Detail

The LEM's syslog collector is set to use the UDP source address of incoming syslogs rather than the IP address or hostname in the syslog message. This normally does not pose a problem except when relaying syslog messages or using a node with multiple ip addresses. If possible, IP Spoofing will need to be used to correct the Node IP.

 

Last modified

Tags

Classifications

Public