Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn more about our patch management solution.


Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM Quick Start and Deployment Guide > Collect log data > Set up your agent nodes

Set up your agent nodes

Created by Caroline Juszczak, last modified by Caroline Juszczak on Aug 05, 2016

Views: 67 Votes: 0 Revisions: 3

After you configure your syslog server, install the LEM agent on your servers and workstations. Log & Event Manager will collect the syslog data from the operating system logs and applications running on each system, normalize the data into readable information, and send it to the LEM manager for processing. All events received from the LEM agents display in the Monitor view.

Using LEM agents, you can:

  • Capture events in real-time.
  • Encrypt and compress the data for efficient and secure transmission to the LEM manager.
  • Buffer the events locally if you lose network connectivity to the LEM manager.

The LEM agent runs on your agent nodes until you stop or uninstall the agent.

You can install the LEM agent by clicking Add Nodes to Monitor in the Getting Started widget.

LEM agent installation checklist

Before installing your LEM agents, complete the pre-installation checklist below. This checklist helps you:

  • Verify that system requirements are met and all required software is installed.
  • Gather the information required to complete the installation.

[ ] Verify that you have administrative access to the servers and workstations you plan to monitor

Windows-based systems require Domain or Local administrative privileges. Linux or Unix systems require root-level access.

[ ] Change the LEM hostname. This will minimize hostname issues before you install the LEM agent.

[ ] Set an exception in your antivirus or antimalware scanning software for the ContegoSPOP folder where the LEM agents will be installed.

The alerts are stored in queue files, which change constantly as they are normalized and encrypted.

[ ] Turn off any anti-malware or endpoint protection applications on host systems during the installation process.

These applications can affect the process by which installation files are transferred to the hosts. This will assist Technical Support if you have issues with your agents.

[ ] Ensure that your target node can support the agent hardware requirements.

[ ] Record the paths to the installation folders on your target server.

Installation folders

LEM agents are installed to the following folders based on the operating system. See the table below.

Operating System Installation Folder
Windows Server 32-bit C:\Windows\system32\ContegoSPOP
Windows Server 64-bit C:\Windows\sysWOW64\ContegoSPOP


Last modified
09:20, 5 Aug 2016