Freedom251 › Security Information and Event Management
SolarWinds Security Event Manager
Visit SolarWinds Security Event Manager Alternatives Pricing
What SolarWinds Security Event Manager is
SolarWinds Security Event Manager (SEM) is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analyzing, and reporting logs. It consolidates and normalizes data from firewalls, intrusion detection and prevention devices, applications, switches, routers, and servers, then correlates machine data in real time to identify threats and attack patterns. Investigation features include visualizations, filters, keyword searches across live and historical events, and scheduled searches using SEM syntax. Active Response can block USB devices, stop malicious processes, and log off users. File integrity monitoring tracks file and directory access, movement, and shares, correlating audit events with system and Active Directory activity. Hundreds of pre-built connectors are listed. Reports and filters address HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP, and GLBA. Pricing is $1,789 a month per node, with a 30-day trial.
Who it suits
SEM is aimed at IT and security professionals, including teams with limited security or compliance resources. It suits organizations needing on-premise log management, threat detection, response automation, and compliance reporting.
What it does well
- Real-time correlation identifies threats and attack patterns
- Automated response can block USB devices
- File integrity monitoring includes Active Directory correlation
- Hundreds of pre-built connectors
- Reports cover numerous compliance frameworks
What to know first
- No free plan
- Costs $1,789 a month per node
- On-premise virtual-appliance deployment
- Data retention listed as 50 days
Limits
The plan starts at $1,789 a month, billed per node and licensed by log-emitting sources. Data retention is 50 days, and there is no free plan.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Security Event Manager | per node, per month; volume discounts available · Pricing starts at this rate · licensed by log-emitting sources, not log volume | $1,789 a month |
As solarwinds.com lists them, read 8 Oct 2026. The maker's own page has the final word.
Getting started
- Open the SolarWinds Security Event Manager website
- Start the fully functional 30-day trial
- Deploy SEM as a virtual appliance on-premise
- Connect log-emitting sources using available connectors
- Use SEM search query syntax to investigate events
- Configure alerts, detection rules, and response actions
Verdict
SEM combines centralized logging, detection, response, investigation, and compliance reporting in an on-premise appliance. Its per-node pricing and infrastructure requirements should be reviewed before deployment.
Questions
What is SolarWinds SEM?
It is an on-premise SIEM for collecting, analyzing, and reporting logs to identify cyberthreats and demonstrate compliance.
How is SEM deployed?
SolarWinds delivers it as a virtual appliance for on-premise deployment.
What is the starting price?
The Security Event Manager plan starts at $1,789 a month, billed per node.
Is there a free plan or trial?
There is no free plan. SolarWinds offers a fully functional 30-day trial.
How is licensing calculated?
Licensing is based on log-emitting sources, not log volume.
What data retention is listed?
The listed data retention is 50 days.
Facts from SolarWinds Security Event Manager's own pages
- Compliance reporting
- Its out-of-the-box reports and filters cover frameworks including HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP, and GLBA. · solarwinds.com, 8 Oct 2026
- Connectors
- SolarWinds says SEM includes hundreds of pre-built connectors, and its documentation lists connectors across categories such as firewalls, operating systems, routers, and switches. · documentation.solarwinds.com, 8 Oct 2026
- Deployment
- SEM is delivered as a virtual appliance and described by SolarWinds as an on-premise SIEM tool. · solarwinds.com, 8 Oct 2026
- File integrity monitoring
- SEM can monitor file and directory access, movement, and shares, and correlate file audit events with system and Active Directory events. · solarwinds.com, 8 Oct 2026
- Founded
- 1999 · solarwinds.com, 28 Sept 2026
- Incident response
- Active Response can automate actions such as blocking USB devices, killing malicious processes, and logging off users. · solarwinds.com, 8 Oct 2026
- Intended users
- SolarWinds describes SEM as a tool for IT and security professionals, including teams with limited security or compliance resources. · solarwinds.com, 8 Oct 2026
- Log collection
- It collects, consolidates, normalizes, and visualizes logs from sources including firewalls, IDS/IPS devices, applications, switches, routers, and servers. · solarwinds.com, 8 Oct 2026
- Purpose
- SEM is an on-premise SIEM for collecting, storing, analyzing, and reporting logs to help IT teams identify cyberthreats and demonstrate compliance. · solarwinds.com, 8 Oct 2026
- Search and investigation
- SEM provides visualizations, filters, keyword searches across live and historical event data, and scheduled searches. · solarwinds.com, 8 Oct 2026
- Support
- SolarWinds offers SEM self-led onboarding, product documentation, troubleshooting articles, training, and customer support plans. · support.solarwinds.com, 8 Oct 2026
- Threat detection
- SEM correlates machine data in real time to identify threats and attack patterns. · solarwinds.com, 8 Oct 2026
- Trial
- SolarWinds offers a fully functional 30-day trial of SEM. · solarwinds.com, 8 Oct 2026
Where SolarWinds Security Event Manager stands on Freedom251
- Security Information and Event Management#12 of 29
- SIEM Software#17 of 29
- File Integrity Monitoring Software#22 of 34