Documentation forSecurity Event Manager

Manage the monitored nodes

The Nodes window displays two types of monitored nodes: Agents and non-agent devices. Agents are software applications installed on a monitored device. They collect and normalize log date before it is sent to the SEM Manager. Non-agent devices are hardware devices that send log data directly to the SEM Manager for normalization and processing. These devices include firewalls, switches, and routers.

Click Configure > Nodes in the console toolbar to display your monitored nodes. If your SEM agents require an upgrade, a warning message displays on the page, as shown below.

You can add agent nodes, configure node connectors, and monitor activity. After you configure the nodes and connectors, click Live Events in the toolbar to view your network activity. Here, you can create and apply filters to tailor your log feed, allowing you to view event logs that are detrimental to the health of your network environment.

Refine the node results

Refine the node results by selecting an option in the Refine Results column. For example, to view all monitored agents, maximize Type and select the Non-Agent checkbox. All agents display in the center console with details about each monitored agent.

The following table lists actions you can perform on the Nodes page.

If you want to... Do the following:
Add an agent node Deselect all options in the left column, and then click Add agent node in the toolbar.
Export the node list to a CSV file Click Export in the toolbar.
Manage your node connectors Select an agent type (agent or non-agent), select a connector, and then click Manage node connectors in the toolbar.
Organize your node list by IP address, operating system type, or version Click the Name drop-down menu in the toolbar and select an option.
Locate a specific node in the node list Enter a search parameter in the Search field.
Refresh the nodes list Click Reload data in the toolbar.

See the following topics for additional tasks you can perform to manage the monitored nodes.