Endpoint Protection

Hi everyone,

We are currently using SEPM 12.1 RU1 MP1 in our environment. Log analysis is one of our daily tasks. We have created a full scan that is scheduled to be run on scecific day of week. On weekly basis I need to go through scan logs and find out the systems on which this scan is cancelled or failed. Currenty the difficulty that I'm facing is how to differenciate between the custom scans and this weekly scheduled scan as there in no filed in the scan logs that mentions that particular scan is scheduled one or it is initiated by user. So is there any way to differentiate between these scheduled scans and custom scans?

are you looking at the scan logs on client side. There should be name as "manual scan" and "scheduled scan" under "Logged by" column.

Currently there is no way to differentiate from SEPM logs. There is a suggestion for product enhancement is present in the idea section of this form. You may also vote for it so that Symantec developers will look into it.

Scan Log Export from SEPM should distinguish between types of scans

Hi Pete,

I need to get these records in the scan logs that we pull through SEPM. Currently I'm unable to find it there.

Hi,

After exporting this report in CSV format you can use filter to find scheduled scans or manual scans.

Hi,

You should promote the following idea.

Scan Log Export from SEPM should distinguish between types of scans

Yes Chetan, I already did..