Login to SEPM

Monitors tab

Logs tab

Set log type to Computer Status

Click on Advanced settings

Click on Compliance Options

tick the box for Infected Only

Click View log

Drop down the selected option and select All

Click on Clear Infected Status at the top

Hi Brian,

I am aware of this process but I am looking for something which can be done in 1 click using any SQL script or something. Clearing that many infected status will take huge amount of time.As you can't imagine how super fast my SEPM console and SEPM srerver is.

Try this

Delete from SEM_Agent where INFECTED <> '1'

Or update INFECTED = 0

I would use SQL queries with caution...

sandra

Hello,

Here are few Articles whcih may be helpful to you:

1) How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH102954

2) How to delete Quarantined items from the Symantec Endpoint Protection Manager.

http://www.symantec.com/business/support/index?page=content&id=TECH106444

3) Sweeping SEPM log data from the database manually.

http://www.symantec.com/docs/TECH105351

4) Managing log data in the Symantec Endpoint Protection Manager (SEPM)

http://www.symantec.com/docs/TECH90856

If you are looking forward for SQL,  check this:

1) Using a custom schema for the sem5 database used by the Symantec Endpoint Protection Manager.

2) Symantec™ Endpoint Protection Manager Database Schema Reference

This new article describes how to remove these "still infected" notifications in bulk (1000 at a time).

How to reset the "Still Infected" status of clients in bulk from the Symantec Endpoint Protection Manager.
Article: HOWTO59235   |  Created: 2011-09-14   |  Updated: 2012-03-15   | 
Article URL http://www.symantec.com/docs/HOWTO59235   

Please use this method as needed - do not attempt to manually manipulate the data in any table of your SEPM's database.  &: )