Endpoint Protection

Let's say I have SEPM1, SEPM2 and SEPM3. Is it possible to forward the logs from SEPM2 and SEPM3 to SEPM1

Yes, you can make one SEPM the master logging server

See here on setting master logging server

http://www.symantec.com/docs/HOWTO81169

It's mostly for sending logs to a syslog server so not sure if this is exactly what you need but the above link is how you configure it.

is the current setup having replication?

Hi Brian,

We don't have SSIM or similar product. We want to generate the report of SEPM 2 and SEPM 3 using the SEPM 1? Is this possible

if the SEPMs don't replicate then you need to forward syslog server and then any log corelation product. if not, i think check with IT analytics.

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

It's not possible to forward the logs from SEPM2 and SEPM3 to SEPM1 if they are indepndent Servers.

Unless you have a syslog than it cannot be done the way you want it.

Hi,

Is there any update?

OR

If query has answered then don't forget to mark your thread as 'SOLVED' with the answer that best helps you