Endpoint Protection

Hi All,

I am facing issue at my site after upgrading to 11.0.7.

My any of the clients are not reporting trheir activity logs to SEPM.

Clients are getting updated & they are also getting policies updated.

But at SEPM i am not receiving any logs from Client regarding any virus detection, def. updation. or any.

Still they are showing active on my console withour any issue.

are the lateste logs not seen?

what log retention setting have you set on SEPM?

Please enable the Risk tracer in SEPM server console to see the system virus detection log.

Following information to allow the risk tracer in SEPM server console.

1.      Open the SEPM server console.

2.      Go to policy  and slect Antivirus and Antispywer policy.

3.     Duble click and open the Antivirus and Antispyware policy.

4.    Click on File System Auto-Protect and go to Advanced.

5.     Click on Risk Tracer and Mark to Enable the risk tracer.

you can also define the maximum lenth of risk logs..

your system risk log problem will be resolve

When the last log has been updated??

logs are seen before i have upgraded the SEP.

I am not able to see the logs after upgradation.

what kind of log are you looking in SEPM console?

on the client side, did you check the logs are visible under the log of client GUI?

Repair the SEPM or Upgrade the new version of SEP 12.1.

Hi,

if clients show online, the communication is OK. Clients load their logs into program files\symantec\sepm\data\inbox, SEPM scans those subfolderd and load the new logs into the database, after that you can read them in the console. I believe your logs are accumulating there in the inbox folder. Check how many .dat and .err files are there.

A common reason for that is the inability to write new data into the database, for example because of a limitation on the size of the tables. Check the log scm-server-0.log for basic errors.