Submit a ticketCall us

WebinarVisual Monitoring Tactics: Getting More Log Search Value from SolarWinds Log & Event Manager with nDepth Webcast

Do things seem to make more sense when they are visualized? Are you an IT professional or security expert with a wish for more cybersecurity tools that provide an intuitive visual experience? Join Alexis Horn and Jamie Hynds from SolarWinds as they demonstrate how the nDepth feature in LEM can help make visualizing log search results a reality.

Register now.

Home > Success Center > Log & Event Manager (LEM) > Log & Event Manager (LEM) Documentation > LEM Administrator Guide > LEM tuning and periodic maintenance tasks

LEM tuning and periodic maintenance tasks

Updated: October 5, 2018

SolarWinds recommends that you complete the tasks in this topic to ensure that LEM performs optimally as your network changes.

Complete the following tasks to ensure that LEM uses processor and memory resources efficiently.

Review your rule configurations

Review your rules periodically to ensure that they are not triggering too frequently. This can be caused by:

  • Low threshold settings. Consider increasing the threshold for rules that trigger due to network traffic.
  • Broadly-defined conditions. Define rules to apply only to specific user names, IP addresses, or systems. Consider whether a different set of rules with different conditions could serve two distinct areas of your environment.
  • Rules using event groups instead of a single event or subset of events. Rules that detect authentication or network traffic may trigger on additional events, but may only apply to a subset of those events.

Validate your virtual appliance reservations

System requirements can change over time, so periodically review your resource allocations. See Managing LEM VMs and appliances in the LEM console for details.

Last modified

Tags

Classifications

Public