Screencasts - Hilfsvideos

SEP client Definitions updates

Created: 05 Feb. 2013 | 10 Kommentare

When the SEP client updates the definitions over the internet, I dont see any logs updated in the system log under Client Management view logs "system log"

Kategorien für Diskussion:

Kommentare KommentareZum neuesten Kommentar

das Bild der Ashish-Sharmas


Sep client are update or not ?

Did you check under View Logs ->Virus and Spyware Protection -> System Logs

Thanks In Advance

Ashish Sharma

das Bild der SaravananBs

Thanks Shish,

I'm new to SEPM infrastructure support

Yes, SEP client updated and its made entry in View Logs ->Virus and Spyware Protection -> System Logs and in other place i've looking after log/log.liveupdate file to see the entry, but this file follows GMT 24hrs format, which is confusing me to compare with current system time as System log uses.

das Bild der pete_4u2002s

yes the time is set to GMT, you can verify by using keywords for success or failure of the LU.

das Bild der SaravananBs

Why Symantec not following one system.log entry to see the update overview on SEP client updates.

any idea on how often symantec will release the definitions update? any place to subscribe the alert for the new release of definitions and other updates?



das Bild der Ashish-Sharmas


Symantec released 3 Anti virus defination in every 8 hours.

you can verify

Virus Definition Update FAQ
Article:TECH103326 | Created: 2007-01-13 | Updated: 2010-01-29 | Article URL

Thanks In Advance

Ashish Sharma

das Bild der Sumit Gs

Ther is not any alert/notificiation for release of virus defintion.

You can only get the information from your SEPM Manager home page

Or from the below site


Sumit G.

das Bild der Rafeeqs

You can check the event viewer for updates.

Symantec Endpoint Protection 11.x event log entries

Event ID 16

das Bild der SebastianZs

Alternatively you can check directly in the log file for liveupdate events - this is for SEP 11.x if you are using liveupdate internet servers as download source:

For 12.1 the log would be lue.log:

das Bild der JS@supports


It's not available under system log. It really not necessary if info is available on GUI.In the SEP client GUI itself you can check whether client is updated or not. However to troubleshoot the issue if definitions are not updating then logs would required.

You should refer the articles shared by SebastianZ.

In the registry also there would be an entry for client definitions update.