Submit a ticketCall us

Cloud Workloads: Meet Your New Hybrid IT Reality
Have you found yourself in that evolving, hybrid IT grey area and wondering if cloud workloads are now part of your purview? And if so, will monitoring cloud workloads require a new set of dedicated cloud monitoring tools? Your answers: yes, they should be, and no, they don’t.

Find out how SolarWinds® Server & Application Monitor (SAM) can help you monitor your cloud workloads side by side with your on-premises workloads. Register Now.

Home > Success Center > Log & Event Manager (LEM) > USB Defender alerts are missing user and source machine details

USB Defender alerts are missing user and source machine details

Created by Jason Dee, last modified by MindTouch on Jun 23, 2016

Views: 24 Votes: 0 Revisions: 3


This article describes the issue when USB Defender alert emails are missing certain details such as the  the source user account or source host.


All version of LEM 


The USB mass storage devices are being plugged into the source machine before a user has actually logged in.



Due to the nature of Windows logging, there isn't a solution for this scenario. If the device is plugged in prior to a user actually logging in, the Windows event will be generated at the moment the device is plugged leaving some details behind details.


Last modified