Updated: September 6, 2018
For non-network devices, you can install the LEM Agent on workstations and servers to collect and normalize log data before it is sent to LEM. The LEM Agent also collects security data from each device (such as Windows event logs, database logs, and local antivirus logs) and transmits this data to the LEM device. The LEM Agent has a small footprint on the device and prevents log tampering during data collection and transmission.
The LEM Agent provides the following benefits:
LEM provides access to the most frequently installed agents. See Additional LEM downloads for version 6.4 for a comprehensive list of agents.
The following example shows how to install the Windows agent on a workstation.
To verify that LEM is receiving agent data, see Explore the Node Details view.
Previous: Verify that events are being sent to LEM | Next up: Add a syslog device to LEM |