Welcome! Use the login menu to access:
Customer Portal
SolarWinds customers can download purchased software, renew maintenance, & more in our updated Customer Portal!
Community
After logging in, community members can rate & review SolarWinds software & participate in forums on thwack.com.
Partner Portal
SolarWinds channel partners will find all the resources they need in the Partner Portal, including exclusive partner tools.
| More

SolarWinds Knowledge Base

Disabling Windows Noise Alerts Using Alert Distribution Policy

Description

A LEM Agent on a Windows computer generates several alerts during normal operations that we consider "noise alerts." Basically, these alerts represent background Windows functions, and they are not necessary for an optimized LEM deployment.

Procedure

The alerts described in the tables below can be disabled using your LEM Manager's Alert Distribution Policy by unchecking their boxes in the Console, Database, Warehouse, and Rules columns.

To modify your LEM Manager's Alert Distribution Policy:

  1. Open your LEM Console and log into your LEM Manager from the Manage > Appliances view.
  2. Click the gear icon next to your LEM Manager, and then select Policy.
  3. Locate the alerts you want to disable by either browsing the alert taxonomy or using the search box under Refine Results.
    Note: You can locate these noise alerts by using the tables below.
  4. Check or uncheck the boxes in the Console, Database, Warehouse, or Rules columns as appropriate.
    Notes:
    • Uncheck the Console box to prevent your LEM Manager from showing the alert in your LEM Console.
    • Uncheck the Database box to prevent your LEM Manager from storing the alert on your LEM database.
    • Uncheck the Warehouse box to prevent your LEM Manager from sending the alert to an independent database warehouse.
    • Uncheck the Rules box to prevent your LEM Manager from processing the alert against your LEM rules.
    • Check any box to enable processing for the alert at any of the four levels listed above.
  5. If you want to save your changes and keep working, click Apply.
  6. If you want to save your changes and exit the Alert Distribution Policy window, click Save.

Table of Alerts by Alert Category

Use this table to manually navigate the alert taxonomy and locate each Windows noise alert.

Alert Name Category
Machine Logon Generic Alert > Audit Alert > Auth Audit > Machine Auth Audit
Machine Logoff Generic Alert > Audit Alert > Auth Audit > Machine Auth Audit
Machine Auth Ticket Generic Alert > Audit Alert > Auth Audit > Machine Auth Audit
User Auth Ticket Generic Alert > Audit Alert > Auth Audit > User Auth Audit
Policy Scope Change Generic Alert > Audit Alert > Resource Audit > Policy Audit > Policy Access

Table of Descriptions by Alert Name

Alert Name Description
Machine Logon This alert represents "background" machine authentications and is not related to any interactive user logon activity.
Machine Logoff This alert represents "background" machine authentications and is not related to any interactive user logon activity.
Machine Auth Ticket This alert is related to normal Kerberos ticketing, but it doesn't provide any useful information. It only indicates that a ticket was granted, and doesn't provide any additional detail.
User Auth Ticket This alert is related to normal Kerberos ticketing, but it doesn't provide any useful information. It only indicates that a ticket was granted, and doesn't provide any additional detail.
Policy Scope Change This alert represents Windows servers changing the scope of users' permissions as they access network resources. It occurs every time a user accesses a resource, but doesn't provide any useful data.


Related Articles

No related articles were found.

Attachments

No attachments were found.

Visitor Comments

No visitor comments posted. Post a comment

Post Comment for "Disabling Windows Noise Alerts Using Alert Distribution Policy"

If this article does not provide the solution you need, please consider visiting our community forums on thwack or contacting SolarWinds Support. Please use the following form to provide comments that help us improve this KB article. Fields marked with an asterisk are required.

   Name:
* Email:
* Comment:
* Enter the code below:

 

Article Details

Last Updated
26th of October, 2011

Would you like to...

Print this page  Print this page

Email this page  Email this page

Post a comment  Post a comment

 Subscribe me

Subscribe me  Add to favorites

Remove Highlighting Remove Highlighting

Edit this Article

Quick Edit

Export to PDF


User Opinions

100% thumbs up
(1 vote)
0% thumbs down
(0 votes)

How would you rate this answer?




Thank you for rating this answer.

Continue