Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > LEM Administrator's Guide > Configuring LEM connectors for Agent and non-Agent devices

Configuring LEM connectors for Agent and non-Agent devices

Updated: September 15, 2017

This topic describes how to configure LEM connectors.

Configure connectors for the devices that you want to monitor with LEM

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. Choose from the following:

    • To configure Agent connectors, choose Manage > Nodes.

    • To configure non-Agent connectors, choose Manage > Appliances.

  3. Click next to the LEM Agent or LEM Manager instance that you want to configure, and then select Connectors.

  4. Find the connector to configure:

    • Type part of the connector name in the search box, or use the filter menus in the Refine Results pane.

    • To restrict the list to only configured connectors, select Configured.

  5. Click next to the connector instance, and then select New.

  6. Complete the connector configuration form. The following fields are common across most connectors:

    • Alias: Enter a "user friendly" label for your connectors.

    • Log File: Enter the location of the log file that the connector will normalize. This is a location on either the local computer (Agents), or the LEM appliance (non-Agent devices).

    • Output,nDepth Host, andnDepth Port: You only need to configure these values if LEM is configured to save raw (un-normalized) log messages.

  7. Click Save.

  8. In the Tools list, click the gear icon next to the new connector (denoted by an icon in the Status column), and then select Start.

  9. Verify that the connector is working:

    1. Click Monitor on the Console navigation bar.
    2. Check the SolarWinds Events filter to verify the connector started.
    3. Create a filter to test the new connector. For example, check the default Firewall filter after configuring your firewall connector.

Configure LEM Manager connectors

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. Choose Manage > Appliances.

  3. Open the Connector Configuration for [Manager] form.

  4. Add a connector instance for each product event log source.

  5. When you are finished, start the connector instance.

  6. Repeat Steps 6 and 7 for each product or device logging to the Manager computer.

  7. Repeat Steps 4–8 for each Manager until you configured connectors for each point on your network.

Configure the sensor and actor connectors for each LEM Agent

Use the connector configuration form to connect the Agent connector to the target product that is either installed on, or remotely logging to the Agent computer. After configuring the Agent connectors, the Manager can monitor and interact with the products and devices on that computer.

Agent connectors run locally to monitor log files, as well as data logged to the Agent computer from remote devices that cannot run an Agent. The active response connectors (actors) allow the Agent to receive instructions from the Manager and perform active responses locally on the Agent computer, such as sending pop-up messages or detaching USB devices.

Connectors grid icons

The following table describes the icons used in the Connectors grid.

Icon Description

File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/1310-Appliances_view_in_the_LEM_console/icon-bluetool_24x24.png

A product sensor. The sensor displays the name of the product it is designed to monitor.

File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/1310-Appliances_view_in_the_LEM_console/icon-orangetool_25x24.png

A product actor that performs an active response. The actor displays the name of the product it is designed to interact with.

File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/1310-Appliances_view_in_the_LEM_console/icon-sensortool_27x27.jpg

A configured instance of a sensor connector. The Status column displays Stopped File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0410-Configuring_LEM_connectors_for_Agent_and_non-Agent_devices/icon-stop_13x13.png or Running File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0410-Configuring_LEM_connectors_for_Agent_and_non-Agent_devices/icon-play_13x13.png for each instance.

File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/1310-Appliances_view_in_the_LEM_console/icon-actorinstance_27x27.jpg

A configured instance of an actor connector. The Status column displays Stopped File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0410-Configuring_LEM_connectors_for_Agent_and_non-Agent_devices/icon-stop_13x13.png or Running File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0410-Configuring_LEM_connectors_for_Agent_and_non-Agent_devices/icon-play_13x13.png for each instance.

Configure Agent connectors

Follow this procedure to configure the connectors (sensors and actors) used by the Agent to monitor and interact with each network security product and device running on the Agent computer.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. Open the Manage > Nodes view.

  3. Search for the IP address or host in the Nodes grid.

  4. Click beside the hostname or IP address, and select Connectors.

  5. In the Refine Results pane, enter a search term that describe the connector you need.

  6. Click beside your targeted connector and select New.

  7. Complete the connector information form, and then click Save.

    Some connectors require the exact path of the Windows log and some just read the Windows Event Viewer logs.

  8. When you are finished, start the connector instance.

  9. Repeat steps 3 through 7 for each product or device that the Agent is monitoring on the Agent computer.

    If you are not using connector profiles, repeat steps 2 through 7 for each Agent until you have configured the connectors for each point on your network. If you are using connector profiles, you can use a configured Agent as a template for a connector profile.

Use connector profiles to configure multiple Agents

Most Agents in a network include a few different connector configurations. You can streamline your connector configuration process by creating connector profiles. A connector profile groups Agents that share the same connector configuration.

For more information, see Create connector profiles to manage and monitor LEM Agents.

Last modified

Tags

Classifications

Public