Endpoint Protection

Hi there, we've scheduled several reports to be emailed to our shared mailbox and told the SEPM console to send them at 2:30 AM, so if there are any emergencies, when we arrive in the office at 6:00 AM, we can immediately take action on the problem.

What is so unusual, is that SEPM does not send the reports at exactly 2:30 AM, it might send it at 8:30 AM, which is way past the time that we're supposed to be doing any troubleshooting in a production environment, which could cause chaos after work normally starts for the day.

I noticed when scheduling new reports, SEPM says, "Start after"... why is there no "Start at"?

Thanks for any info.

Dan Smith,
BC Liquor Distribution Branch
Vancouver, BC, Canada

is your email server holding it ? and release later ?
any chance ?
multiple site or you have single site?

I'm fairly new to all of this SEP terminology, so in response to your first question, I don't know if the server is "holding" it (why would it do that?).

We have several environments (prod, dev and test), with a SEPM console for each environment, and reporting set up for 2:30 AM, but all of the reports never come in at 2:30 AM.  They usually start to trickle in around 8:30 AM.   I don't think having too many environments is an issue with Reporting.

Dan

Hi,

       There were some reported issue regarding the same and is fixed in the latest release MR5 or RU5. We would request you to upgrade one of the test machines to the latest version and then try configuring it again, also check the date and time format whether they are the same in SEPM as well as the Mail server.

Yeah, RU5 seems to have fixed this.  For us, each day it would get a little later and later.  Was kind of ammusing acutally.

We've done an upgrade to 11.0.5002.333 and will watch it tonight and see what happens.  If it doesn't do what is expected, I'll be back tomorrow!  :-)

Thanks all for your help.

Dan

Upgrading to the latest version (11.0.5002.333) did not solve the reporting problem.

Is thre any way to get the reports to generate before we get to the office at 6:00 AM every weekday?

Thanks,
Dan

Could you please tell in which Time Zone , you are in.

The SEPM  follows GMT, so what i feel that because of this the reports are getting sent 5 hrs late.
Try to adjust the time according to the GMT and see what happens.( this may be a work around)

https://www-secure.symantec.com/connect/idea/path-not-displayed-alert-mails

https://www-secure.symantec.com/connect/idea/sepm-use-local-time


https://www-secure.symantec.com/connect/idea/should-have-option-receive-alerts-different-timezones

Prachand, we are in the Pacific Time Zone (west coast of Canada).

The "Logs and Reports" tab in the Preference window has an option where you can set the "time zone used in export", but this is already set to "Local".

What we're going to try:

• Change the SERVER time zone to GMT
• Set the server time to the local time
• Run the report again overnight

I doubt this would do anything because essentially we are telling the server to generate the report at 2:30 AM (or whatever time before regulart work hours begin) and hopefully it will, but this is like configuring a report to be generated in the Pacific time zone at the Local time, wouldn't it?  Essentially nothing is changed.

Why do you suppose generated report times are such a hot issue in the forums?  Is it a bug?

Will keep you updated of our progress.

Dan