After LEM collects your log data, you can use nDepth to perform data search and analysis tasks and LEM Reports to view or schedule fixed reports for regulatory and compliance purposes.
Use the nDepth integrated search tool to query your alert or log database for events of interest. The search results are displayed in a variety of graphical widgets, including a word cloud, tree map, and charts and graphs. You can also view and export your results in text format or generate an ad-hoc PDF report with your charts and text data.
Using nDepth, you can:
You can access nDepth by clicking the Explore tab and selecting nDepth or clicking the Explore drop-down menu from any other view in the LEM Console.
LEM Reports is a stand-alone application you install separately from the LEM Console. You can access LEM Reports using a shortcut (if available) or navigating to the SolarWinds Log and Event Manager application group in your Windows Start menu.
You can use LEM Reports to:
To get started using LEM Reports, filter the reports listing by the industries or requirements relevant to your network. When you open LEM Reports, you can access your custom list of reports by clicking Industry Reports on the main view.
Select your industries and requirements in the left pane.
For example, if you are an educational facility that accepts credit card payments, select Education, FERPA, and PCI.
Select which reports to run in the Level column on the Settings tab.
The Master report contains all data for the targeted category. For example, the master-level Authentication report contains all authentication-related data.
The Detail report contains information related to a specific type of event. For example, the Authentication Failed Authentications detail-level report only contains data related to failed authentication events.
The Top report displays the top number of occurrences for a specific type of event. Select the default top number, Top N of 10, or another option to customize your report.
If you installed LEM Reports but cannot open the application or run reports, complete the following procedures to troubleshoot the issue.
To troubleshoot application launch errors on systems running Windows Vista, Windows 7, and Windows Server 2008:
When you launch LEM Reports, the following error may appear:
Logon failed. Database Vendor Code 210
To resolve this issue, add the system running LEM Reports to the list of authorized reporting computers. By default, the LEM appliance restricts all access to LEM Reports.
To allow specific systems to run LEM Reports or remove all reporting restrictions, see Configuring Report Restrictions.