Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM 6.3 User Guide > Basic LEM procedures > Add devices

Add devices

Created by Caroline Juszczak, last modified by Caroline Juszczak on Jul 22, 2016

Views: 29 Votes: 0 Revisions: 4

You can configure your IT devices to work with LEM by:

  • Installing the LEM Agent and connectors directly on the device
  • Setting the device to log to LEM and then configuring the appropriate connectors directly on the LEM appliance

Install the LEM Agent on systems that allow third-party software. SolarWinds provides LEM Agents for the following operating systems:

  • Microsoft Windows (local and remote installers)
  • Linux
  • Apple OS X
  • Solaris on Intel
  • Solaris on Sparc
  • HPUX on PA
  • HPUX on Itanium
  • IBM AIX

You can also configure non-agent devices (such as firewalls, routers, or switches) to send logs directly to the LEM appliance.

Click the video File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button_videoCamera_18x12.png icon to view a tutorial on adding devices.

Install a LEM Agent

Install the LEM agent on servers, domain controllers, and workstations to monitor local events on the systems in your network. When completed, the LEM Agent captures log information from sources such as Windows Event Logs, database logs, and local antivirus logs. Additionally, the LEM Agent allows LEM to take specific actions that you can define as rules. You can also trigger actions manually from the LEM Console using the Respond menu.

If you are deploying LEM Agents to Windows systems, use the Remote Agent Installer for a faster deployment.

To install a LEM agent:

  1. In the LEM console, click the Ops Center view.
  2. In the Getting Started wizard, click Add Nodes to Monitor or visit the SolarWinds Customer Portal for a complete list of available downloads.
  3. Download and run the appropriate installer on the systems you want to monitor.

You can view and manage installed LEM agents in the Nodes grid located at Manage > Nodes. The LEM Agent for Windows includes several preconfigured connectors that collect and display data from these systems immediately after you install the LEM agent. By default, the LEM Agent for Windows includes the following preconfigured connectors:

  • Windows Security Log (for the host OS version)
  • Windows Active Response
  • Windows Application Log
  • Windows System Log

For additional operating systems or broader coverage on your Windows computers, configure specific connectors to obtain your targeted data.

Configure non-agent devices

Non-Agent devices include any supported network or security device that cannot host a LEM Agent (such as firewalls, routers, and switches). To monitor these devices without a LEM Agent, configure each device to log in to the LEM appliance using syslog or SNMP traps. When completed, use the LEM Console to configure the appropriate connector on the LEM appliance.

Configure connectors for agent and non-agent devices

  1. In the LEM Console, click the Manage tab and select Appliances (for non-Agent connectors).
  2. Click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to the LEM node or manager you want to configure and select Connectors.
  3. In the Refine Results pane, select the Configured check box to view or modify the configured connectors.

    To locate a connector, use the search box and filter menus.

  4. In the Connectors window, click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to your targeted connector and select New.
  5. Complete the Connector Configuration form according to the device you are configuring.

    The following fields and descriptions are common for most connectors:

    • Alias
      A user-friendly label for your connector.
    • Log File
      The location of the log file that the connector will normalize. This location is on the local computer (Agents) or LEM appliance (non-Agent device).
    • Output, nDepth Port
      The values used specifically for LEM environments configured to store original log messages.
  6. Click Save.
  7. In the Connectors list Status column, click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to the new connector and select Start.
  8. Click the Monitor tab and verify the connector is active by checking for new events.

Configure FIM connectors in the LEM Console

  1. In the LEM Console, click the Manage tab and select Nodes.
  2. Click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to the node you want to configure and select Connectors.

    To locate connectors, enter FIM in the Refine Results search box.

  3. Click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to the connector you want to configure and select New.
  4. Under Monitor Templates, click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to a template and select Add to selected monitors.

    The Monitor template moves to the Selected Monitors area.

  1. When completed, click Save.
  2. In the Connectors list, click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_15x12.png next to the new connector (denoted by an icon in the Status column) and select Start.
  3. Click the Monitor tab.
  4. Verify that the connector is operational by checking for new events in the tab window.

Troubleshoot issues

If you configured a device to log to the LEM appliance but cannot determine the exact logging location, check the logging facilities on the LEM appliance.

  1. Connect to your LEM appliance using the VMware console view or an SSH client (such as PuTTY).

    To connect your appliance using VMware, select Advanced Configuration on the main console screen and press Enter to access the command prompt.

    To connect your appliance through SSH, log in as the CMC user using port 32022 and provide the appropriate password.

    The default password is password.

  2. At the cmc> prompt, enter appliance.
  3. At the cmc::acm# prompt, enter checklogs.
  4. Enter an item number to select a local facility to view.
  5. Search for specific devices logging to this facility (such as the product name, device name, or IP address).
  6. Configure the connector with the corresponding Log File value.

Create connector profiles to manage LEM agents

You can create connector profiles to manage and monitor similar LEM agents across your network. Connector profiles are used for:

  • Configuring and managing tools at the profile level. This reduces the amount of work for large LEM Agent deployments.
  • Creating filters, rules, and searches using your connector profiles as Groups of LEM Agents. For example, you can create a filter to display all Web traffic from computers in your domain controller connector profile.

To create a connector profile, create a connector file using LEM agent as a template. When completed, add LEM agents to your new connector profile.

  1. Configure the tools on the LEM agent to use as the template for your new connector profile.

    These tools are applied to any LEM agents that are added later to the connector profile.

  2. Click the Build view and select Groups.
  3. Click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Plus(Gray)_16x12.png and select Connector Profile.
  4. Name the new connector profile and enter a profile description.
  5. Select the LEM Agent you want to use as your template from the Template list next to the Description field.
  6. Click Save.

Add LEM agents to your new connector profile

  1. In the Groups screen, locate the new connector profile.
  2. Click File:Success_Center/New_Articles/LEMUserGuide_MT/040/060/Button-Gear_18x15.png next to your connector profile and select Edit.
  3. Move your LEM agents from the Available Agents list to the connector profile.
  4. Click Save to finish adding LEM Agents to your tool profile.

    You can now apply the connector configurations set for the template agent to any agent added to the connector profile.

    See Data sources for a list of supported devices.

 
Last modified
10:58, 22 Jul 2016

Tags

Classifications

Public