SolarWinds Security Event Manager
SolarWinds Security Event Manager is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analysing and reporting logs.
What SolarWinds Security Event Manager is
SolarWinds Security Event Manager is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analysing and reporting logs. It gathers data from firewalls, intrusion devices, applications, switches, routers and servers, then normalises and visualises events. Real-time correlation helps identify threats and attack patterns. Active Response can block USB devices, stop malicious processes and log users off. File-integrity monitoring tracks file and directory access, movement and shares, correlating audit events with system and Active Directory activity. Investigation tools include filters, visualisations, keyword searches across live and historical data, and scheduled searches using SEM search query syntax. SolarWinds lists hundreds of pre-built connectors and reports for HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP and GLBA. The plan is $1,789 a month per node, with 50-day retention.
Good
- Real-time threat correlation
- Automated incident-response actions
- File-integrity monitoring
- Hundreds of pre-built connectors
- 30-day fully functional trial
Watch out
- No free plan
- On-premise virtual-appliance deployment
- Licensed per node and log-emitting sources
Who it suits
SEM suits IT and security professionals, including teams with limited security or compliance resources. It is for organisations needing self-hosted log analysis, response automation and compliance reporting.
Verdict
SEM combines centralised logging, detection, response and compliance reports in a self-hosted appliance. Its deployment model and per-node starting price require planning for infrastructure and licensing.
Plans and prices
From SolarWinds Security Event Manager's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Security Event Manager | $1,789 a month | Pricing starts at this rate · licensed by log-emitting sources, not log volume · per node, per month; volume discounts available |
The facts
Each one read from SolarWinds Security Event Manager's own pages, with the date it was checked.
What it does
- Compliance reporting
- Its out-of-the-box reports and filters cover frameworks including HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP, and GLBA.checked 8 Oct 2026
- Connectors
- SolarWinds says SEM includes hundreds of pre-built connectors, and its documentation lists connectors across categories such as firewalls, operating systems, routers, and switches.checked 8 Oct 2026
- Deployment
- SEM is delivered as a virtual appliance and described by SolarWinds as an on-premise SIEM tool.checked 8 Oct 2026
- File integrity monitoring
- SEM can monitor file and directory access, movement, and shares, and correlate file audit events with system and Active Directory events.checked 8 Oct 2026
- Incident response
- Active Response can automate actions such as blocking USB devices, killing malicious processes, and logging off users.checked 8 Oct 2026
- Intended users
- SolarWinds describes SEM as a tool for IT and security professionals, including teams with limited security or compliance resources.checked 8 Oct 2026
- Log collection
- It collects, consolidates, normalizes, and visualizes logs from sources including firewalls, IDS/IPS devices, applications, switches, routers, and servers.checked 8 Oct 2026
- Purpose
- SEM is an on-premise SIEM for collecting, storing, analyzing, and reporting logs to help IT teams identify cyberthreats and demonstrate compliance.checked 8 Oct 2026
- Search and investigation
- SEM provides visualizations, filters, keyword searches across live and historical event data, and scheduled searches.checked 8 Oct 2026
- Support
- SolarWinds offers SEM self-led onboarding, product documentation, troubleshooting articles, training, and customer support plans.checked 8 Oct 2026
- Threat detection
- SEM correlates machine data in real time to identify threats and attack patterns.checked 8 Oct 2026
The company
- Founded
- 1999checked 28 Sep 2026
Money
- Trial
- SolarWinds offers a fully functional 30-day trial of SEM.checked 8 Oct 2026
Alternatives to SolarWinds Security Event Manager
- 1
Wazuh
Free planOpen sourceWebAPILinuxmacOS8.4From $571 a month - 2
Blumira
Free planAndroidiOSWebAPI8.2Free plan - 3
UTMStack
Open sourceWebAPILinuxmacOS7.9From $238.80 a month - 4
Sumo Logic
Free planWebAPILinuxmacOS7.6Free plan - 5
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 6
Elastic Security
Free planWebAPILinuxSelf-hosted7.1From $0.09 a month