Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM 6.3 User Guide > Introduction to LEM > LEM Manager

LEM Manager

Created by Caroline Juszczak, last modified by Caroline Juszczak on Jul 20, 2016

Views: 87 Votes: 0 Revisions: 6

LEM Manager is a virtual appliance deployed in your corporate enterprise. This device includes:

  • Hardened Linux OS
  • Syslog Server and SNMP Trap Receiver
  • High compression, search optimized database
  • Web server
  • Correlation engine

The following table lists the resources that provide input to LEM Manager.

Resource LEM Input
Network Device log sources
(such as routers, firewalls, and switches
Syslog messages
Servers and applications LEM agent data
Microsoft  Windows  Workstations LEM agent data

SolarWinds NPM

SolarWinds SAM

SolarWinds Virtualization Manager (VMan)

Performance alerts received as SNMP Traps

You can install the LEM Reports Console on multiple servers to schedule and execute over 300 audit-proven reports. From a security standpoint, you can execute the service > restrictreports command to limit the IPs authorized to run these reports.

Protocols and communications

Network devices can send syslogs to the LEM Manager over TCP or UDP. LEM Agents installed on servers and workstations initiate TCP connections and push data to the LEM Manager.


Last modified
11:38, 20 Jul 2016