Endpoint Protection

 View Only
  • 1.  Messy data in logs.

    Posted Jan 25, 2012 07:23 AM

    Hello!

    After upgrading SEPM 11 to SEP 12.1.RU1 all records containing Russian letters looks like in the table below:

    25.01.2012 09:08:23 Continue company.biz
    12-1-1012-ws
    p.zatylkin Minor Log writing to USB drives_Write File C:/totalcmd/TOTALCMD.EXE f:/╨╛╤В╨┐╤Г╤Б╨║.docx 172.20.20.20 0 1
    25.01.2012 09:08:23 Continue company.biz
    12-1-1012-ws
    p.zatylkin Minor Log writing to USB drives_Write File C:/totalcmd/TOTALCMD.EXE f:/╨г╨┐╤А╨░╨▓╨╗╤П╨╡╨╝╤Л╨╡ ╤Г╤Б╤В╤А╨╛╨╣╤Б╤В╨▓╨░ ╨▓ ╤Б╨╡╤В╨╕.xlsx 172.20.20.20 0 1
    25.01.2012 09:38:48 Continue company.biz
    12-1-1012-ws
    p.zatylkin Minor Log writing to USB drives_Write File C:/totalcmd/TOTALCMD.EXE f:/╨Ч╨░╤П╨▓╨║╨░ ╨╜╨░ ╨┤╨╛╤Б╤В╤Г╨┐ ╨║ Directum.doc 172.20.20.20 0 1
    25.01.2012 09:38:48 Continue company.biz
    12-1-1012-ws
    p.zatylkin Minor Log writing to USB drives_Write File C:/totalcmd/TOTALCMD.EXE f:/Rules of network addressing sodrugestvo.local.docx 172.20.20.20 0 1

    It is real problem for me. Now all reports contain this unreadable data.

    Thanks for any help!



  • 2.  RE: Messy data in logs.

    Trusted Advisor
    Posted Jan 25, 2012 07:34 AM

    Hello,

    Check this Article:

    Symantec Endpoint Protection 12.1: Double-byte characters in exported Manager log files are garbled in Microsoft Excel

    http://www.symantec.com/docs/TECH162300

    Hope that helps!!



  • 3.  RE: Messy data in logs.

    Posted Jan 26, 2012 06:14 AM

    Namaste, Mithun!

    I am not talking about exporting. It is displayed directly in the manager, ie Symantec data in the database get garbled (like on the screenshot). But in any case, thank you.

    P.s.

    We have 2 sites in different offices. This problem appears on the site that uses SQL 2008 R2 database. On the other site, with embedded database, there is no such problem.



  • 4.  RE: Messy data in logs.

    Trusted Advisor
    Posted Jan 26, 2012 06:25 AM

    Hello,

    Namaste Dmitriy smiley

    There are few Questions - 

    1) What Language of SEPM have you installed on the machine??

    2) Are all the clients running SEP 12.1?

    3) What is Language set on SEPM Server Machine?

    4) What is the Language set on SEP installed on Client Machines?

    5) What Language is set on SQL 2008 R2 server?

    Awaiting Reply.



  • 5.  RE: Messy data in logs.

    Posted Jan 26, 2012 06:42 AM

    1) English

    2) Some clients still runing SEP 11.

    3) English. Regional setting - Russian.

    4) Mostly Russiaan clients.

    5) English. SQL server collation - Cyrillic_General_CI_AS.

    BR



  • 6.  RE: Messy data in logs.

    Trusted Advisor
    Posted Jan 26, 2012 07:14 AM

    Hello,

    It seems that this could be one of the causes of the issues.

    SEPM is installed on the English Server whereas mostly all the clients are Russian.

    So we may have to check the sylink and debug logs on what could be the reason of this issue.

    I would suggest you to create a Case with Symantec Technical Support.

    You can create a Case Online as well...

    QuickStart Guide - Create and Manage Support Cases in SymWISE

     
    Hope that helps!!