Submit a ticketCall us

Welcome to the NEW Success Center. Search all resources (documentation, videos, training, knowledge base articles) or browse resources by product. If you are unable to find what you are looking for, please contact us at customersuccess@solarwinds.com

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > LEM behavior when one device has an agent installed and is sending syslogs

LEM behavior when one device has an agent installed and is sending syslogs

Table of contents
Created by Erica Gill, last modified by MindTouch on Jun 23, 2016

Views: 729 Votes: 0 Revisions: 3

Overview

This article discusses LEM behavior when a device has a LEM agent installed and is also sending syslogs to the LEM appliance.

Environment

All LEM versions

Detail

When a device has a LEM agent installed and is also sending syslogs to the LEM appliance the expected behavior is that only the LEM agent will show in the Nodes list in the LEM console. 

 

To tell if an event has been collected by the LEM appliance and the syslog connector:

  • The ToolAlias field will show the name of the connector on the appliance which collected and normalized the information. 
  • The InsertionIP will be that of the LEM appliance while the DetectionIP will be that of the device.

 

To tell if an event has been picked up by the agent and connectors configured on the connector:

  • The ToolAlias field will show the name of the connector on the agent which collected and normalized the information. 
  • The InsertionIP will be that of the device and the DetectionIP will be that of the device.

 

Last modified
20:12, 22 Jun 2016

Tags

Classifications

Public