Submit a ticketCall us

Announcing NPM 12.2
With NPM 12.2 you can monitor your Cisco ASA firewalls, to monitor VPN tunnels for basic visibility and troubleshooting tunnels. NPM 12.2 also uses the SolarWinds Orion Installer so you can easily install and upgrade one or more Orion Platform products simultaneously.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM 6.3 User Guide > Additional LEM Configuration and Troubleshooting Information > Using the SolarWinds LEM Remote Agent Installer

Using the SolarWinds LEM Remote Agent Installer

The LEM remote agent installer pushes Log & Event Manager agents to Microsoft Windows hosts across your network. The installer unzips the installation files to a temporary folder of your choice, searches for Windows systems across your network, and installs the LEM agents one at a time to your targeted systems.

When completed, the installed agents automatically start up and connect to your LEM manager. A system reboot is not required.

Installer requirements

  • XP SP3 Compatibility Mode for systems running Microsoft Windows Vista, Windows 7 or Windows Server 2008 system
  • A user account with write privileges to your C$:\ or D$:\ shares

Agent hardware specifications

Below are the agent hardware specifications.

Hardware Requirement


64 MB

Disk Space

130 MB

Installation folders

LEM agents are installed in the following folders, according to the bitness of their host operating systems:

Bitness Installation Folder





Antivirus recommendations

SolarWinds recommends setting an exception in your antivirus or anti-malware scanning software for the ContegoSPOP folder where the LEM agents will be installed. The alerts are kept in queue files, which change constantly as they are normalized and encrypted.

Additionally, turn off any anti-malware or endpoint protection applications on host systems during the installation process, as they can affect the process by which installation files are transferred to the hosts.

Installing LEM agents across your WAN

If you are installing LEM agents on the far end of a WAN link, copy the Remote Agent Installer executable to the end of the WAN link and run it in this location. This will avoid using your WAN bandwidth to copy LEM Agents multiple times.

Running the LEM Agent Installer

SolarWinds does not recommend installing the agent on Windows 7/8/2008/2012 computers from a computer running Windows XP/2003.

  • Select a temporary folder on your computer for the installation procedure and click Next.

    The default location is C:\SolarWindsLEMMultiInstall. This temporary folder will be automatically deleted after the installation is complete.

  • Enter the host name of your LEM manager in the Manager Name field and click Next. Do not change the default port values.

    Use the fully qualified domain name for your LEM manager when you deploy LEM agents on a different domain. For example, enter

  • Select Get hosts automatically or Get hosts from file (One host per line) and click OK.

    Get hosts automatically uses a NetBIOS broadcast to identify hosts on the same subnet and domain as the computer running the installer.

    Get hosts from file (One host per line) prompts you to browse for a text file that includes the hosts on which you want to install LEM Agents. Use this option if you are deploying LEM agents to:

    • Computers located on a different subnet as the installation computer. The computer could access these subnets, but their hosts will not be recognized by the NetBIOS broadcast.
    • A small segment of a large network that requires additional time to select and choose the appropriate computers.
    • In a network with a complex naming scheme, requiring additional time to select the appropriate hosts.

      The text file used for this option can contain host names, fully qualified domain names, or IP addresses on their own lines. If you use DNS names, the installation computer must be able to resolve the names.

  • Select the computers that host the LEM agent, and then click Next.
  • Verify that your computer list is correct, and then click Next.

  • Select the Windows operating system for the remote installation.

    The default paths are provided for all supported Windows systems. SolarWinds strongly recommend using the default paths, as the LEM agent may not be recognized as a service by Windows if it is not installed in a system folder.

    The installer is set to automatically detect host operating systems by default, but you can also specify an operating system if all of the target hosts are running the same one.

  • Click Next.
  • Decide whether to include USB-Defender with the LEM agent, and then click Next.

    The installer includes USB-Defender by default. SolarWinds recommends installing this software on every system. USB-Defender will never detach a USB device unless you enable a corresponding rule. By default, USB-Defender generates alerts for USB mass storage devices attached to your LEM agents.

  • Confirm the Pre-Installation Summary settings and click Install.

    The installer extracts the installation files to the temporary directory you defined in step 6.

  • Click Next to continue.

    The installer copies the extracted files to the installation directory you defined for the target hosts and notifies you if any failures occur during the process.

    When the agent starts, it will communicate to the LEM on unsecure port 37890 to obtain a certificate. After obtaining the certificate, it will start communicating to the LEM on secure port 37891 and/or port 37892.

Troubleshooting LEM agent communications

If you encounter any issues with agent communications, SolarWinds suggests the following:

  • Disable your antivirus software.
  • Disable the Windows firewall (on all three Windows profiles), or exclude ports 37890 through 37892 (on all three Windows profiles). If you are using a network firewall, the agent may need all seven firewall ports excluded: 37890 through 37896.
  • Re-install the agent using a remote agent un-installer or remove the agent and delete the ContegoSPOP directory before the re-install.
  • If the agent communications use the LEM hostname, ensure that the agent can resolve the LEM host.
  • Open a command line and execute telnet LEM-IP-hostname 37890, Repeat for ports 37891-37892.

    Telnet is a basic test and does not confirm communications on the selected port.

  • Restart the agent service. If the agent does not stop and then restart, delete the (c:\windows\syswow64\ContegoSPOP\spop\) sub-directory, and restart the agent service.


Last modified
15:03, 6 Dec 2016