SolarWinds SIEM - Log & Event Manager

Instantly improve security and compliance with an easy-to-use and affordable SIEM

Starts at $4495
DOWNLOAD FREE TRIAL Fully functional for 30 days

Eliminate threats faster with instantaneous detection of suspicious activity and automated responses for mitigation and compliance.

Easy to deploy SIEM virtual appliance provides real-time, in-memory event correlation, active responses, file integrity monitoring, threat intelligence, and USB device monitoring.

Fast and easy compliance reporting for HIPAA, PCI DSS, SOX, ISO, FISMA, FERPA, NERC CIP, GLBA, GPG13, and more

Get out-of-the-box compliance reports/rules, pre-configured filters, and file integrity monitoring to detect file and registry changes. Rapidly identify compliance policy violations.

Key Features

Fast and easy compliance reporting

Get out-of-the-box compliance for HIPAA, PCI, SOX, ISO, NCUA, FISMA, FERPA, GLBA, NERC, GPG13 and more.


Real-time event correlations

Receive instant notification and remediation by processing log data in-memory.

Active response

Mitigate threats instantly with automated actions that block IPs, stop services, disable users, and more.

Intelligent automation

See value instantly with out-of-the box defaults, correlation rules, reports, and active responses.

File integrity monitoring

Meet compliance requirements and protect data by tracking files and Windows® registry changes.

Learn more Screenshot

USB device monitoring

Gain valuable insight into USB device and file activity while enforcing USB policies.


Affordable pricing

Enjoy simple, all-inclusive, per-node pricing with a low-priced Workstation Edition option.

Easy to use and maintain

Access an intuitive UI, online training, a deep knowledge base, and a 130K-strong user community.

Quick to deploy

Deploy the virtual appliance and configure it in about an hour. No consultants needed.

More Features

Supports 1,200+ systems, applications, and network devices

Collect log data from the systems, applications, and network devices that you care about using syslog, SNMP traps, or agents. Supported log sources

All-inclusive pricing

Enjoy a license cost that includes all SIEM components, agents, connectors, File Integrity Monitoring, USB Defender, and SQL auditing.

Out-of-the-box threat intelligence data

Receive alerts about suspicious security events via a threat intelligence feed that inspects for matches against known bad hosts. Watch the Video

Insider threat detection

Deliver broad compliance support and deep security intelligence for insider threats with embedded file integrity monitoring. Learn more

Advanced search for event forensic analysis

Discover issues easily with an advanced ad hoc IT search capability that uses a drag-and-drop interface that tracks events instantly.

Log file analysis

Simplify troubleshooting and resolve issues faster by centralizing logs from network devices, servers, and databases in one location. Learn more

Log data compression and retention

Store more data with 95+% compression and schedule archives to meet long-term compliance and reporting needs.

Malicious event tracking

Correlate event data from thousands of sources in real-time using built-in SIEM event rules to remediate threats in less time.

HIPAA, PCI, SOX, ISO, FISMA, NCUA, and many more

Generate compliance reports easily using hundreds of audit-proven templates and a console that lets you customize reports. Learn more

Virtual appliance scales in larger environments

Scale easily with the VMware® or Hyper-V® virtual appliance deployment model.

User activity monitoring

Monitor user logon/logoff, misuse of privileged user accounts, installation of unauthorized software, and unauthorized data transfers. Learn more

Workstation Edition licensing

Add Windows® workstations more cost effectively with Workstation Edition licensing. Learn more

What Our Customers Are Saying
Hamlin Bank and Trust Company Prevents Data Theft With Log & Event manager
"Certain employees attempted to pass off sensitive financial informatuion via USB to cell phone. The USB rule disconnected the device and fired an email to administrators"
Brian Bailey, IT/Systems Administrator
Hamlin Bank and Trust Company
Source: TechValidate. TVID: TVID: 2FB-250-DJE
VXI Global Solutions Tracks Anomalies in Real-Time With Log & Event Manager.
“Log & Event Manager has allowed me to track anomalies within my network environment. Log & Event Manager is able to provide an accurate depiction of the network environment and the learning curve isn’t too steep.”
Simon Wu, Network Administrator
VXI Global Solutions CO Switch Communications
Source: TechValidate. TVID: 5A1-BE7-680
After installing SolarWinds Log & Event Manager, the City of Kennewick demonstrates and meets HIPAA regulatory compliance.
“With Log & Event Manager I was able to track down the source of a ransomware infection.”
John Reed, Senior Network Engineer
City of Kennewick
Source: TechValidate. TVID: 6C2-15A-1A9


  • screenshot Zoom

    Security dashboard

  • screenshot Zoom

    Compliance reporting

  • screenshot Zoom

    Active response

  • screenshot Zoom

    Intelligent search

  • screenshot Zoom

    Built-in correlation

  • screenshot Zoom

    Real-time dashboard

  • screenshot Zoom

    Log normalization

  • screenshot Zoom

    File integrity monitoring

  • screenshot Zoom

    Endpoint coverage

  • screenshot Zoom

    USB defense

System Requirements

NOTE: Log & Event Manager is deployed as a virtual appliance. As your log collection volume increases, additional memory and CPU resources may be required.
Virtual Appliance supported on VMWare ESX/ESXi 4.0+ and Hyper-V Server 2008 R2/2012/2012 R2
  • Hard Drive 250GB
  • Memory8GB
  • CPUDual Core, 2GHz
  • Virtual EnvironmentsVMware® ESX®/ESXi 4.0+ and Hyper-V® server 2008 R2/2012/2012 R2

Case Studies

LEM helped us detect a major malware problem on one of our company PCs. We were able to quickly act on it, thanks to the features in LEM. ”

Our LEM is an invaluable tool for monitoring our network and servers. Other departments within the city ask me for recommendations, and I steer them toward Log & Event Manager.”

It has helped us by preventing unknown USB devices [from] being connected and introducing malware [in]to our systems.”

LEM contains the most features and best support options that other providers simply can’t match."


Cyber Defense Magazine: Best SIEM Solution 2016 SC Magazine Awards 2015 Europe Winner Security Insider Readers' Choice Award 2015 GSN Homeland Security Awards 2015 Winner SC Magazine Awards 2015 U.S. Finalist Redmond Reader's Choice Gold Award 2014

Used by Companies Worldwide

Take the Next Step
Let's Talk it Over

Call Us at 866.530.8100