Endpoint Protection

Hello,

In the "Virus and Spyware Policy" you can configure the scan schedule.

One of the parameters available is under "Scan Duration" -> " Scan for up to". Here you can specify how long a scan can run before it gets terminated. I would like to configure the Server Scan Schedule to start at 4am on Sunday and give it a "Scan for up to" value of 24 hours. This will terminate the scan on  Monday 4am. Normally 24 hours should be long enough for most scans to complete. However: how do I identify Servers that were not finished yet after 24hours and got their Scan process terminated?

Is there a central LOG-file which collects this info?

Thanks a lot for your help in advance!

You can find it in the Scan log on the client

In the SEPM, go to Monitors >> Logs and set the log to show Scan

You can filter as needed to show exactly  what you need

Check this thread

https://www-secure.symantec.com/connect/forums/when-did-full-scheduled-scan-end

yes, under monitor --> logs --> scan. you will find the details.

Thanks!