Endpoint Protection

 View Only
  • 1.  exporting risk logs

    Posted Oct 13, 2011 03:52 AM

    Good Day!

     

    I would like to ask about exporting risk logs, is it possible to export risk logs with the same format with the risk logs in SEPM.

     

    Best Regards,

    Ishmael Del Mar



  • 2.  RE: exporting risk logs

    Broadcom Employee
    Posted Oct 13, 2011 04:45 AM

    Are you going to export the logs from client side?

    from client side open the SEP client GUI and click on status and click on Option of Antivirus and Antispyware and check for risk logs and export it. You can export into txt and then can be convereted into the csv format.



  • 3.  RE: exporting risk logs

    Posted Oct 13, 2011 05:04 AM

    hi,

    no, i am exporting it from the SEP GUI administrator



  • 4.  RE: exporting risk logs

    Broadcom Employee
    Posted Oct 13, 2011 05:10 AM

    You mean SEPM, the exported logs will be in .txt format. Later on you can convert into csv.



  • 5.  RE: exporting risk logs

    Posted Oct 13, 2011 08:26 PM

    yes it is in csv format. but the content of the csv format, the fields in it is arranged  differently than the risk logs in the SEP monitoring. for example;

    In CSV format it is arrange like this:          

    Event Computer Name Source Risk Name Occurrences File Path Description Actual Action Requested Action Secondary Action Event Date Event Insert Time Domain User Name Server Client Group Source Computer Name

    In SEP monitoring risk logs it is arrange like this;

     

    Action Date/Time Event Action Web Domain Risk Name Source User Name Computer Domain Operating System Count Filepath User Allowed 

    My question is, is it possible to have a uniform arrangement fields both CSV format and the SEP monitoring risk logs?