Endpoint Protection

 View Only

  • 1.  EventID overview

    Posted Nov 06, 2013 03:01 AM

    I'm looking for a list over event IDs for both the manager and clients. This is for handling data when it's registered in the Windows Event Viewer.

    I have found this overview [http://www.symantec.com/docs/TECH186925], but it's only for the clients and not comprehensive. With 'not comprehensive' I mean that I can find event IDs that are not listed. For example Event ID #(100, 200, 202, 34053).

    So, is there any complete overview ov Event IDs for the Symantec Endpoint Protection Client and Manager? 

     

    Client and manager version: 12.1



  • 2.  RE: EventID overview

    Posted Nov 06, 2013 03:36 AM

    Those are the one which are publicly available.  List of SEPM event Ids is not published yet.

    I found few

    Title: 'Event ID 599 Failure Audit occurs after Symantec Endpoint Protection (SEP) is installed.'
    Document ID: 2008070209482648
     
    Title: 'MsiInstaller error (Event ID 11721) while Installing Symantec Endpoint Protection 11.0'
    Document ID: 2008020501270248
     
     
    Title: 'Event ID 59 in event logs and return code=4 in the Symantec Endpoint Protection Manager (SEPM)'
    Document ID: 2009061013395148
     
     
    Title: 'Symantec Endpoint Protection 11.0 error: Stops during installation with Event ID 11708.'
    Document ID: 2007101109115348
     
     
    Title: 'Event ID 58 and 55 appear repeatedly in the Application Event Log on a Symantec Endpoint Protection client'
    Document ID: 2008021213593948
     
     
    Title: 'Event 1005 logged after SEPM Install or Upgrade, Though no Prompt for Reboot is Displayed'
    Document ID: 2009033115004948
     
     
    Event IDs 75 and 76, regarding TruScan (PTP)
    Event ID 21 not enough disk space to launch the scan
    Event ID: 1 Description: "Secars Started!"
    Event ID:   7031 The COM+ System Application service terminated unexpectedly
    Event ID 13: "SescLU - LiveUpdate returned a non-critical error.
    Event ID 7000   Service Control Manager
    Event ID : 59 You may get this error after removing the Msi of Symantec Endpoint Protection Manager via Microsoft Installer CleanUp Utility.
    Event ID: 36    you will encounter this error with XP Pro IIS 5.1
    Event ID 1000, Windows cannot unload your registry file.
    Event ID 26 Windows - Low On Registry Space
    Event ID 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in or write out or flush one of the files that contain the system's image of the Registry
    Event IDs: 7023, 20070, 20151, 20063 for   Routing and Remote Access Server (RRAS)
    Event ID: 11721   The corruption of the Windows Installer Utility
    Event ID 1000
    Event ID ( 55 ) in Source ( LiveUpdate )
    Event ID ( 58 ) in Source ( LiveUpdate )
    EVENT ID 1013   A newer version of this  software is already installed on this machine.
    Event ID 11721 MsiInstaller error
     Event ID 11708  MsiInstaller
    Event ID 22: "Symantec AntiVirus Auto-Protect failed to load"
    Event id 45 SYMANTEC TAMPER PROTECTION ALERT
    Event id 4096 SEPM service  is stopped
    Event id 4097 Failed to start radius server the radius port may be used by another process
    Event ID 59 Proxy while connectingto liveupdate
    Event ID 7024 JRE
    Event ID 7003 - failed to start SRTSP


  • 3.  RE: EventID overview

    Posted Nov 13, 2013 05:58 AM

    Thanks for a reply.

    If find it quite peculiar that they haven't created a list of event id's.

    Oh, and of your links are outdated...