Configuring client log settings
| Article:HOWTO26891 | | | Created: 2010-01-08 | | | Updated: 2010-01-15 | | | Article URL http://www.symantec.com/docs/HOWTO26891 |
Configuring client log settings
If you have installed Symantec Endpoint Protection, you can configure some client log options. You can configure the number of entries kept in the logs and the number of days that each entry is kept on the client.
You can configure settings for the following client logs:
lf you have Symantec Network Access Control installed, you can enable and disable logging, and send Enforcer logs to the management server. You can also configure the number of log entries and the number of days the entries are kept on the client.
For more information about the Enforcer logs, see the Implementation Guide for Symantec Network Access Control Enforcement.
For the Security, Risk, and Traffic logs, you can also configure the damper period and the damper idle period to be used for event aggregation.
You can configure whether or not to upload each type of client log to the server, and the maximum size of the uploads.
If you choose not to upload the client logs, it has the following consequences:
You cannot view the client log data from the Symantec Endpoint Protection Manager console by using the Logs tab on the Monitoring page.
You cannot back up the client logs when you back up the database.
You cannot export the client log data to a file or a centralized log server.
To configure client log settings
On the Policies tab, under Location-independent Policies and Settings, under Settings, click Client Log Settings.
In the Client Log Settings for group name dialog box, set the maximum file size and the number of days to keep log entries.
Check Upload to management server for any logs that you want the clients to forward to the server.
For the Security log and Traffic log, set the damper period and the damper idle period.
These settings determine how frequently Network Threat Protection events are aggregated.
Set the maximum number of entries that you want a client to upload to the manager at a time.
|
|
Legacy ID
349248
Article URL http://www.symantec.com/docs/HOWTO26891
Terms of use for this information are found in Legal Notices
Thank you.