LEM is its own virtual appliance, so it IS a standalone VM
And, it is structured such that the logs do need to go directly to LEM. You can forward logs you're already collecting in Orion to LEM, but you'd have to forward the raw syslog over.
LEM is its own virtual appliance, so it IS a standalone VM
And, it is structured such that the logs do need to go directly to LEM. You can forward logs you're already collecting in Orion to LEM, but you'd have to forward the raw syslog over.