Submit a ticketCall us

Webinar: Web Help Desk for HR, Facilities and Accounting Departments
This webinar will focus on use cases for HR, Facilities and Accounting.

Having a unified ticketing and asset management system for all the departments in your company can provide end-users with a seamless experience and make things easier for your IT team. Yet, with different business tasks and objectives, many departments don’t fully understand the capabilities of Web Help Desk and how the software can be customized for effective use in their departments.
Register Now.

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM 6.3 User Guide > Basic LEM procedures > Analyze data

Analyze data

Created by Caroline Juszczak, last modified by Caroline Juszczak on Jul 22, 2016

Views: 26 Votes: 0 Revisions: 5

Now that LEM is collecting your log data, use LEM Reports and nDepth to search, analyze, and report on the data.

Click the video File:Success_Center/New_Articles/LEMUserGuide_MT/040/0A0/Button_videoCamera_18x12.png icon to view a tutorial on analyzing data.

About LEM Reports

Use LEM Reports to view or schedule fixed reports for regulatory and compliance purposes.

Using LEM Reports, you can:

  • Automate your reporting
  • Produce compliance reports
  • View reports based on specific regulatory compliance initiatives
  • Provide proof that you are auditing log and event data to auditors
  • Schedule formatted reports for LEM Reports to run and export automatically

About nDepth

Use nDepth to perform immediate search or analysis tasks, or create specific custom PDF reports.

Using nDepth, you can:

  • Search your log data
  • Search for specific variables, such as user names, IP addresses, or specific events
  • Perform root-cause analysis
  • Troubleshoot specific issues
  • Explore data and produce custom PDF reports

Open nDepth in the LEM Console

  1. Click the Monitor view.
  2. Select an event.

    Click Pause to stop the incoming event stream.

  3. Click the Explore drop-down menu in the All Events toolbar and select nDepth.

nDepth dashboard and toolbar

You can use the nDepth dashboard and toolbar to:

  • Search original log messages (also known as raw logs) or normalized events
  • View search results in several charts and graphs, and add values from these visuals directly to your search by clicking them
  • Refine the time frame of your searches using pre-defined or custom ranges
  • View the text output of your search results using the Result Details connector on the nDepth toolbar
  • Export your search results in CSV or fully-customizable PDF format
  • Save searches for future use

Additional Information about nDepth

To execute nDepth searches, see the following SolarWinds articles:

To save nDepth searches for future use, see Save nDepth searches to quickly execute frequent queries.

To export nDepth search results in CSV or PDF format, see Export nDepth results in custom or text formats for retention and ad hoc reporting.

To configure your LEM appliance to store and search original log data, see the following KB articles:

LEM Reports for compliance and historical reporting

LEM Reports is a stand-alone application that is installed separately from the LEM Console. You can access LEM Reports by accessing the SolarWinds Log and Event Manager program group in your Windows Start menu.

You can use LEM Reports to:

  • Run preconfigured compliance and security reports
  • Schedule reports to run automatically
  • Filter the reports list by industry or requirement
  • Run specified master, detail, or top-level reports
  • Use Select Expert to filter your report data by specific values (such as computer name, IP address, or user name)
  • Export reports into several formats, including PDF, CSV, and RPT

To get started using LEM Reports, filter the reports listing by the industries or requirements relevant to your network. Next time you open LEM Reports, you can access your custom list of reports by clicking Industry Reports on the main view.

Master reports contain all of the data for their category. For example, the master-level Authentication report contains all authentication-related data.

Detail reports contain information related to a specific type of event. For example, the Authentication Failed Authentications detail-level report only contains data related to Failed Authentication events.

Top reports display the top number of occurrences for a specific type of event. Use the default top number, or Top N, of 10, or customize this when you run the report.

To filter the reports list by industry or requirement:

  1. Open LEM Reports.
  2. Click the Settings tab and select Manage > Manage Categories.
  3. In the left pane, select your industries and requirements.

    For example, if you work in an educational facility that accepts credit card payments, you can select Education, FERPA, and PCI.

  4. Click OK.
  5. To view the filtered list of reports, click the Settings tab and select Category > Industry Reports.
  6. In the Settings tab, select which reports to run based on their values in the Level column.

Troubleshoot application issues

If you are running LEM Reports on a system running Windows Vista, Windows 7, or Windows Server 2008 but cannot open the application or run reports:

  1. Uninstall LEM Reports and Crystal Reports v11 Runtime.
  2. Reinstall both components as an administrator.
  3. Adjust the LEM Reports properties to run the program in Windows XP compatibility mode.
    1. Right-click the LEM Reports shortcut on your desktop and select Properties.
    2. Click the Compatibility tab.
    3. Select Run this program in compatibility mode for > Windows XP (Service Pack 3).
    4. Select Run this program as an administrator.
    5. Click Ok.
  1. Launch LEM Reports.

Troubleshoot errors

To address a Logon failed. Database Vendor Code 210 error, add the computer running LEM Reports to the list of authorized reporting computers. By default, the LEM appliance restricts all access to LEM Reports. To allow specific computers to run LEM Reports or remove all reporting restrictions, see Configuring Report Restrictions.

Additional LEM Reports procedures

To run, schedule, and configure formatted compliance and security reports using LEM Reports, see:

To install LEM Reports on computers without the LEM Console, see Configuring LEM Reports on Computers Without the LEM Console.

To schedule several best practice compliance and security reports, see:

To work with individual reports in LEM Reports, see:

Last modified
10:17, 22 Jul 2016