How can we check which content SEP 12.1 clients are downloading from GUP?
Created: 25 Apr 2012 | Updated: 25 Apr 2012 | 9 comments
You can find events regarding updates from the GUP by going to Monitors > Logs > Log type: System > Log content: Client activity > View log:
As shown in the screenshot, you can filter it by selecting appropriate event type (Client events) and Event source (SYLINK). You might then save the filter to do not have to configure it everytime.
You might click on Export at the top of the screen to get the results in CSV file, so you would then be able to edit it in Excel, to make a document that would fully match your needs.
Article Filed Under:
Comments 9 Comments • Jump to latest comment
Good tip.
When it comes to content troubleshooting I would recommend using the "System cube" in IT-analytics. It gives the same data as the monitor, but presented much better.
Hello,
Voted. A Common Question which has been answered beautifully.
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Thanks for this info as from last two weeks I was working on the same to get this info.
Voted UP.
Regards,
S2S
Please don't forget to mark your thread solved with whatever answer helped you.
awesome :-) Thumbs up!
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
An SQL query that returns the same result can be found here: https://www-secure.symantec.com/connect/forums/sql-querys-database#comment-7090721
HI John,
Very useful info by you.thanks. Its useful to monitor GUP download contents..
Regards,
Ajay Kumar Singh (Consultant- Information Security)
SCS(Symantec) | MCSA | ITIL v3 | Security+
Thank you Very much.
This is good in that it details which content is pulled from what source, but it omits identifying which machine is doing the downloading.
On the other hand, the 12.1 client now has an event log for Symantec Endpoint Protection Client. It will verify that a specific machine has pulled its content update from a GUP, but it doesn't identify which GUP.
You can actually see in the SEPM console which machine is downloading content from the GUP.
The screenshot I put here is a bit too large, but if you copy/paste it into mspaint, you will notice there are few more columns available on the right side of the console, including one showing downloading "Computer" name.
So finally, you can find in this table:
- Which machine A required content
- Which GUP was used by A
- Which file A downloaded from the GUP
Please remember to mark the proper comment as SOLUTION:
- to identify threads that do not require further assistance
- to let other visitors know how to fix such issue
Would you like to reply?
Login or Register to post your comment.