Endpoint Protection

Hi everybody,

I´m seeking help to find out the paths to important logs that can be analyzed in case of malfunction or audit on the sepm and clients.

I´ve tried my best to find, for example, the liveupdate.log on a client that doesn´t update definitions but had no luck.

Also would need to know the name and place to find the log that shows all transactions made on the sepm.

Finally if someone can make a list of the most important logs and their location, will be very appreciated.

I understand that a lot of the information can be found straight from the sepm console but I think that being able to read straight from the log is much better.

Thank you very much!!

See if these help:

Managing log data in the Symantec Endpoint Protection Manager (SEPM)

Debugging Symantec Endpoint Protection Manager

How to debug the Symantec Endpoint Protection client

Where is the location of LiveUpdate Log file Log.liveupdate?

Additional SEP client logs are here:

C:\ProgramData\Symantec\Symantec Endpoint Protection\<version>\Data\Logs

Required logs for troubleshooting failed Endpoint Protection 12.1 client installations

SEPM: The most important logs (to troubleshooting purpose) are at the following location:

<SEPM_Install_Directory>\tomcat\logs

SEP Client: For the client, the location of the log changes based on the OS and the version of SEP you have installed. However all the client logs are viewable on the SEP client console itself (except the debug logs). If you need to enable debugging for some reason, please follow the document at the link below to enable debugging. There are options to enable debugging for various components of the SEP client. It is enought to enable debugging only for the component that you are troubleshooting.

http://www.symantec.com/docs/TECH102412

Location of debug logs on SEP 12.1 client: C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Logs

Thank you very much for the information!!

Welcome