Configure an agent in LEM

Updated: September 6, 2018

For non-network devices, you can install the LEM Agent on workstations and servers to collect and normalize log data before it is sent to LEM. The LEM Agent also collects security data from each device (such as Windows event logs, database logs, and local antivirus logs) and transmits this data to the LEM device. The LEM Agent has a small footprint on the device and prevents log tampering during data collection and transmission.

The LEM Agent provides the following benefits:

• Captures events in real-time
• Encrypts and compresses the data for efficient and secure transmission to the LEM Manager
• Buffers the events locally if you lose network connectivity to the LEM Manager

LEM provides access to the most frequently installed agents. See Additional LEM downloads for version 6.4 for a comprehensive list of agents.

The following example shows how to install the Windows agent on a workstation.

1. Review the LEM Agent pre-installation checklist.
2. Log in to the LEM Console, and then click Manage > Nodes.
3. Click Add Node.
4. On the Add Node Wizard, click the Agent Node radio button.
5. Follow the on-screen instructions to install an agent.
   1. Place the agent installation file (local installer or remote installer) on the local hard drive.
   2. Right-click the installation file, and then click Run as administrator.
   3. In the Manager Host field, enter the LEM IP address.
6. After you have installed the agent, click Go To Manage > Nodes on the Add Node Wizard.
7. Verify that the node displays in the interface and the Status is Connected.

   To verify that LEM is receiving agent data, see Explore the Node Details view.