Video Screencast Help

SEP logs for Defwatch or Scheduled or Active scan

Created: 19 Mar 2010 • Updated: 22 May 2010 | 7 comments
This issue has been solved. See solution.

Hi, in SAVCE 10.x console you could right-click a client and view logs for Scan Histories.  In the Scan Histories log you could see the type of scan that was run (Defwatch scan, Scheduled scan).  In SEP Manager console, I can go to Monitors | Logs | Log type | Scan | View Log, and see the scans done on a client.

However, I cannot determine the type of scan that was done; whether it was a Scheduled scan or a Defwatch scan or an Active scan or a Startup scan.  Is that info available in SEP?

Comments 7 CommentsJump to latest comment

AravindKM's picture

Unfortunately in SEPM currently such an option is not available.You an put this as an idea in the idea section of this forum so that in future releases you can expect this feature.How ever if you go the client ,in the client GUI go to view logs--->antivirus and antispyware--->view logs--->scan logs in the logged by column you will get some information regrading this..

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

thromada's picture

Why are the client logs empty?  When I go to a client and open the scan logs, they are empty.  But when I look at the logs with the SEPM console by going to Monitors -> Logs -> log type = Scan, the logs show scans.

AravindKM's picture

What is the number of days you set for deleting the logs?
Increase it and try..

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

thromada's picture

Sorry I didn't describe the problem well.

If I issue a scan on a client, from the client itself, that scan will show in the client's scan log and in the SEPM scan logs.

If I issue a scan on a client, from the SEPM console, that scan shows in the SEPM scan logs but not in the client scan logs.

Is this by design or does that have to be configured or enabled?

Thanks.

AravindKM's picture

What about other scheduled scan which you specified in the SEPM?

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

thromada's picture

Hi AravindKM, I don't have any "Scheduled Scans" set.  The Antivirus and Antispyware policy does not have a Weekly Scheduled Scan set.  However, it does have checked the "Run an Active Scan when new definitions arrive".  And that scan is running OK.  I can see the scan log entires when I view the logs from the console.

However, I would expect that I should see the same log entries when viewed on from the client that I do from the console.  I wanted to know if anybody else is experiencing the same thing... scans run from the console do not show in the client log when viewed from the client.

NOTE: I just disovered that the Windows XP Pro x32 SP3 computers show their client logs from the client OK.  It's my Windows 7 Enterprise x64 client that is not showing the Defwatch scans from the client.

In addition, it would be nice if the console logs showed the type of scan that was run (Active, Scheduled, Startup).  I submitted that idea already.

Thanks,
Tom.

SOLUTION
Rafeeq's picture

the type of scan run is not present as of now ; so we cant have it now.
when we run the scan from console all the logs are fwd to manager and not stored locally on the client machine. hence we dont find it