Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all
  • 1.  SEPM Report

    Posted Sep 04, 2014 08:33 AM

    Hi All,

    I need to create a report with SEPM 12.1 that shows, for each SEPM group, how many clients have the SEP clients with version minor of 12.1.

    Is it possible?

    I tried to use the report "clients count by group", but in Advanced Options->Product Version is not possible to select all SEP version minor than 12.1. I can only indicate a specific client version.

     

    SEPM report.png

     

    Thanks



  • 2.  RE: SEPM Report

    Posted Sep 04, 2014 08:35 AM

    Set the filter to Symantec Endpoint Protection Product Versions

    Capture_24.JPG

    Keep in mind it won't show each client but a total overview

    If you need more detail run the Computer Status report (this can't be scheduled)



  • 3.  RE: SEPM Report

    Posted Sep 04, 2014 08:36 AM

    Monitors - logs- computer status report

    export as .csv 

    sort by client version. or by group, thats it



  • 4.  RE: SEPM Report

    Posted Sep 04, 2014 08:54 AM

    Thanks .Brian,
    But with the settings that you suggest I don't view how many clients with SEP 11.x there are...



  • 5.  RE: SEPM Report

    Posted Sep 04, 2014 08:56 AM

    If you set the Product Version filter to All, it will show all versions



  • 6.  RE: SEPM Report

    Posted Sep 04, 2014 09:07 AM

    ok, but I need to consider on 11.x version...and in may network there are many 11.x different version.

    In addition I need to know how many clients with 11.x version there are in SEPM groups, not only how many clients have the 11.x version

    sepm 11.x.jpg



  • 7.  RE: SEPM Report

    Posted Sep 04, 2014 09:07 AM

    If you want export details version wise.You can create fillter below pics.

    Otherwise you can follow above comments

     

    SEP 11.JPG



  • 8.  RE: SEPM Report

    Posted Sep 04, 2014 09:09 AM

    ...I need to considet all 11.x version, not a specific version (for example 11.0.7000.975)



  • 9.  RE: SEPM Report

    Posted Sep 04, 2014 09:13 AM

    No it's not possible you can export computer status report and fillter SEP 11.x TAB.



  • 10.  RE: SEPM Report

    Posted Sep 04, 2014 09:14 AM

    The best way is to export the computer status report and filter based on the version you need.

    The reporting only gives a high level overview



  • 11.  RE: SEPM Report

    Posted Sep 04, 2014 09:26 AM

    @voca, I did mention that in the very beginning,did you try the computer status report?



  • 12.  RE: SEPM Report

    Posted Sep 04, 2014 09:30 AM

    If you want it "scheduled" it not going to give you what you need.

    The only way in this case is the computer status log

    Are you looking for something scheduled or does it matter?



  • 13.  RE: SEPM Report

    Posted Sep 04, 2014 09:31 AM

    Yes, but the main problem is that I have about 150.000 clients and about a hundred of SEPM groups...

    It's a problem to export e log so big...



  • 14.  RE: SEPM Report

    Posted Sep 04, 2014 09:37 AM

    aside from computer status. isn't another way really. The reports only give you a high level snapshot without much detail



  • 15.  RE: SEPM Report
    Best Answer

    Posted Sep 04, 2014 09:41 AM

    Excel can still handle those,once you sort it you can remove the hidden values.. that will reduce the size



  • 16.  RE: SEPM Report

    Posted Sep 04, 2014 09:41 AM

    If you are interested for SQL query,That SQL query showing all version but showing only Limited Field in SEP report.

    See SebastianZ articles

     https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database

    SEP Client Information Query. Query result shows:
    ♦ SEP Computer name
    ♦ Installed SEP Version
    ♦ AV definition revision with the timestamp of the last update
    ♦ Assignement to SEPM Group
    ♦ Operating System
    ♦ Logged-on User
    ♦ MAC address
    ♦ IP address

    select i.COMPUTER_NAME
    , AGENT_VERSION
    , pat.version as AV_REVISION
    , dateadd(s,convert(bigint,LAST_UPDATE_TIME)/1000,'01-01-1970 00:00:00') LASTUPDATETIME
    , g.name as GROUP_NAME
    , i.OPERATION_SYSTEM
    , i.CURRENT_LOGIN_USER
    , i.MAC_addr1 "MAC Address"
    , IP_ADDR1_TEXT "IP Address"
    , i.DELETED "Marked for deletion"
    from sem_agent as sa with (nolock) left outer join pattern pat on sa.pattern_idx=pat.pattern_idx
    inner join v_sem_computer i on i.computer_id=sa.computer_id
    inner join identity_map g on g.id=sa.group_id
    inner join identity_map p on p.id=sa.last_server_id
    inner join identity_map s on s.id=sa.domain_id
    inner join identity_map q on q.id=sa.last_site_id
    where
    (sa.agent_type='105' or sa.agent_type='151') and sa.deleted='0' and I.DELETED = 0
    order by group_name, operation_system, i.COMPUTER_name