Simple deployment example

The following deployment example uses one central syslog server to collect log data from your network devices in a local network. In this deployment, network devices use TCP or UDP to send syslog data to the LEM Manager's syslog server, whereas LEM Agents running on workstations and servers just use TCP to push log data to the LEM Manager.

The syslog server receives logs on port 514 and saves the data in the LEM Manager /var/log file partition. Log file names vary based on the target facility configured on the network device.

The LEM Manager relies on routers, firewalls, and switches to transmit syslog messages to the syslog server running on the LEM Manager. If your log sources are located behind firewalls, see SolarWinds LEM port and firewall information to open the necessary ports. For a list of all ports required to communicate with LEM, see the Port requirements for all SolarWinds products.