When the SEP client updates the definitions over the internet, I dont see any logs updated in the system log under Client Management view logs "system log"
Sep client are update or not ?
Did you check under View Logs ->Virus and Spyware Protection -> System Logs
Thanks In Advance
I'm new to SEPM infrastructure support
Yes, SEP client updated and its made entry in View Logs ->Virus and Spyware Protection -> System Logs and in other place i've looking after log/log.liveupdate file to see the entry, but this file follows GMT 24hrs format, which is confusing me to compare with current system time as System log uses.
yes the time is set to GMT, you can verify by using keywords for success or failure of the LU.
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Why Symantec not following one system.log entry to see the update overview on SEP client updates.
any idea on how often symantec will release the definitions update? any place to subscribe the alert for the new release of definitions and other updates?
symantec releases 3 AV definition per day.
Symantec released 3 Anti virus defination in every 8 hours.
you can verify
Ther is not any alert/notificiation for release of virus defintion.
You can only get the information from your SEPM Manager home page
Or from the below site
You can check the event viewer for updates.
Event ID 16
Alternatively you can check directly in the log file for liveupdate events - this is for SEP 11.x if you are using liveupdate internet servers as download source: http://www.symantec.com/docs/TECH92881
For 12.1 the log would be lue.log:
It's not available under system log. It really not necessary if info is available on GUI.In the SEP client GUI itself you can check whether client is updated or not. However to troubleshoot the issue if definitions are not updating then logs would required.
You should refer the articles shared by SebastianZ.
In the registry also there would be an entry for client definitions update.