Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Log & Event Manager (LEM) > LEM SMTP Traffic filter conditions

LEM SMTP Traffic filter conditions

Table of contents

Updated June 5, 2017


This article provides the default conditions used for the SMTP Traffic filter under the IT Operations section.


LEM 6.2.1 and later


Name: SMTP Traffic


(AND)1st group{

TCPTrafficAudit.DestinationMachine != (MailServerIP)

TCPTrafficAudit.SourceMachine != (MailServerIP)

(OR)2nd group{TECPTrafficAudit.SourcePort=25

TCPTrafficAudit.DestinationPort = 25}   }

See Default LEM filter conditions on the Web Console Monitor page for a full list of available default filters in LEM.


Last modified
20:56, 5 Jun 2017