Now that LEM is collecting your log data, use LEM Reports and nDepth to search, analyze, and report on the data.
Use LEM Reports to view or schedule fixed reports for regulatory and compliance purposes.
Using LEM Reports, you can:
Use nDepth to perform immediate search or analysis tasks, or create specific custom PDF reports.
Using nDepth, you can:
Select an event.
Click Pause to stop the incoming event stream.
You can use the nDepth dashboard and toolbar to:
To execute nDepth searches, see the following SolarWinds articles:
To save nDepth searches for future use, see Save nDepth searches to quickly execute frequent queries.
To export nDepth search results in CSV or PDF format, see Export nDepth results in custom or text formats for retention and ad hoc reporting.
To configure your LEM appliance to store and search original log data, see the following KB articles:
LEM Reports is a stand-alone application that is installed separately from the LEM Console. You can access LEM Reports by accessing the SolarWinds Log and Event Manager program group in your Windows Start menu.
You can use LEM Reports to:
To get started using LEM Reports, filter the reports listing by the industries or requirements relevant to your network. Next time you open LEM Reports, you can access your custom list of reports by clicking Industry Reports on the main view.
Master reports contain all of the data for their category. For example, the master-level Authentication report contains all authentication-related data.
Detail reports contain information related to a specific type of event. For example, the Authentication Failed Authentications detail-level report only contains data related to Failed Authentication events.
Top reports display the top number of occurrences for a specific type of event. Use the default top number, or Top N, of 10, or customize this when you run the report.
To filter the reports list by industry or requirement:
For example, if you work in an educational facility that accepts credit card payments, you can select Education, FERPA, and PCI.
If you are running LEM Reports on a system running Windows Vista, Windows 7, or Windows Server 2008 but cannot open the application or run reports:
To address a Logon failed. Database Vendor Code 210 error, add the computer running LEM Reports to the list of authorized reporting computers. By default, the LEM appliance restricts all access to LEM Reports. To allow specific computers to run LEM Reports or remove all reporting restrictions, see Configuring Report Restrictions.
To run, schedule, and configure formatted compliance and security reports using LEM Reports, see:
To install LEM Reports on computers without the LEM Console, see Configuring LEM Reports on Computers Without the LEM Console.
To schedule several best practice compliance and security reports, see:
To work with individual reports in LEM Reports, see: