Endpoint Protection

Dear all ,In some day my SEPM console show No. of clients wrong (I installed SEP 800 clients) and delete clients from console when offline 15 days

How to check total number of SEP installed on SEPM

Thank you 

What Exact SEPM version are you using?

Use Monitors, Logs, Computer Status and click Export to get a CSV of all the information about the computers in the console

Monitors - logs - computer status 

export the log as .csv

drop in excel

how many do you see?

On the Symantec Endpoint Protection Manager (SEPM) Home Page, the Endpoint Status count adds up to more clients than exist in the environment

I Export log past year (on 24/10/2014)  but clients show 500 client 

On 28/10/2014 my clients show up to 700+ clients

Have you try export report group wise ?

SEPM Console -> Client group -> Select all client ( CTRL+A) and paste in excel sheet.

you need to going every group.

From the home screen it says , OFFLINE clients are about 248. I think thats what making the difference.

You might be having old clients ( duplicate entires) which are not purged.

On the report what you have export, can you use excel function to see if there are any duplicates, if yes then your previous clients are not purged ( delete after 15 days).

we can later run a command to delete these from DB... can you quick check on that?

Client on 26/10/2014 show : 742

On 29/10/2014 show  (get logs past year):  732

from license status show : 732 (Generated 29/10/2014)

from license status show : 536 (Generated 24/10/2014)

In some days number of clients has reduce, some days clients grow up (Check from logs past week)

What database are you using ?

if you are using SQL database please run below query and find sep client status.

See SebastianZ below articles

https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database

SEP Client ID information contains:
♦ SEP computername
♦ Client ID, Computer ID, Hardware ID
♦ Client Status
♦ Client creation and last update timestamp
♦ Operating System information
♦ SEP Client Version

SELECT [Comp].[COMPUTER_NAME]
, [Agent].[DELETED]
, [Agent].[CURRENT_CLIENT_ID]
, [Comp].[HARDWARE_KEY]
, [Comp].[COMPUTER_ID]
, dateadd(s,convert(bigint,[Comp].[TIME_STAMP])/1000,'01-01-1970 13:00:00') as Time_Stamp
, [Agent].[STATUS]
, dateadd(s,convert(bigint,[Agent].[CREATION_TIME])/1000,'01-01-1970 13:00:00') as Creation_Time
, dateadd(s,convert(bigint,[Agent].[LAST_UPDATE_TIME])/1000,'01-01-1970 13:00:00') as Last_Update_Time
, [Comp].[OPERATION_SYSTEM]
, [Agent].[AGENT_VERSION]

FROM [dbo].[SEM_AGENT] as [Agent] inner join [dbo].[SEM_COMPUTER] as [Comp] on [Agent].[COMPUTER_ID]=[Comp].[COMPUTER_ID]

/* where [Comp].[COMPUTER_ID] like 'Computer ID as used in the database' */
/* where [Comp].[COMPUTER_NAME] like 'NetBIOS name of computer' */
/* where [Agent].[CURRENT_CLIENT_ID] like 'Unique ID as displayed on General tab of client properties in console' */

order by [Comp].[COMPUTER_NAME] asc

create a computer status report for 24/10/2014, see how many clients are online?

you can filter only online clients under computer status