Endpoint Protection

 View Only
  • 1.  Symantec Log

    Posted Nov 20, 2013 02:13 AM
      |   view attached

    Symantec Log,

     

    Dear Forum,

     

    Need help, in Symantec SEP 12.1 there is a log or some file that we want to delete, see attachment as detail, because we need the space (about 50 gb), is there ok if we delete the file?

    log.PNG

    Regards

     

    Joe.



  • 2.  RE: Symantec Log

    Posted Nov 20, 2013 02:17 AM

    Check

    Disk Space Management procedures for the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH96214

     

    Changing the log settings to reduce the size of the database.

     

    Article:TECH105238 | Created: 2008-01-27 | Updated: 2010-11-02 | Article URL http://www.symantec.com/docs/TECH105238

    Symantec Endpoint Protection virus definition folder consumes a large amount of disk space

     

    Article:TECH102927 | Created: 2007-01-15 | Updated: 2010-08-13 | Article URL http://www.symantec.com/docs/TECH102927

    Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager

     

    Article:TECH92225 | Created: 2009-01-05 | Updated: 2013-11-05 | Article URL http://www.symantec.com/docs/TECH92225

     

     

     

     



  • 3.  RE: Symantec Log

    Posted Nov 20, 2013 02:49 AM

    Check these Articles:

    http://www.symantec.com/docs/TECH102927

    http://www.symantec.com/docs/TECH141811

    https://www-secure.symantec.com/connect/articles/issue-related-low-disk-space

     

    TECH100019   How to manually repair or backdate virus definitions for Symantec AntiVirus Corporate Edition 8.x and 9.x

    TECH103176   How to clear out corrupted definitions for a Symantec Endpoint Protection client manually

    How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

    http://www.symantec.com/docs/HOWTO59193

    Drive Space used by Virus Definitions Updates

    http://www.symantec.com/docs/TECH141811

    How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

    http://www.symantec.com/docs/HOWTO59193

    Disk Space Management procedures for the Symantec Endpoint Protection Manager

    http://www.symantec.com/docs/TECH96214

     



  • 4.  RE: Symantec Log

    Posted Nov 20, 2013 03:01 AM

    Those are the folders where virus definitions are stored. You can open the contentinfo text file and it will tell you what are stored in each of those alpha numberic folders.

    Once you clear whats inside the folder the folder will be re-populated when new defs are downloaded.

    To check the space you need to make the Content revision stored in SEPM to 3 ( I believe you have set it to 10 now)



  • 5.  RE: Symantec Log

    Posted Nov 20, 2013 06:52 AM

    Do not delet anything from inetpub/contet manually - this content mirrors what is in the database and will repopulate automatically as soon as you delete it. Those are SEPM definitions and not log files. In order to limit the space used by those please change the settings for SEPM signature retention:

    http://www.symantec.com/business/support/index?page=content&id=TECH92225



  • 6.  RE: Symantec Log

    Trusted Advisor
    Posted Nov 20, 2013 08:57 AM

    Hello,

    I agree with Sebastian's comment.

    How many clients is this SEPM managing?

    In case you are storing 30 days worth of definitions - how many revisions are set to be stored on SEPM - 90? Symantec releases around 3 defs updates every day = 30days/90 revisions

    90 revisions would mean 180 defs revisions stored in reality (64 and 32bit) these are around 230MB compressed and additionaly around 400 MB uncompressed - that gives you 180 x 630MB = approx. over 110GB only for the AV Defs - so this is expected.

    Try to limit the stored revisions if they are not really required by the clients:

    Once you changed the number of revisions to keep, just run LiveUpdate: this should apply your changes and automatically delete oldest definitions.

    How to change the number of downloaded content revisions that are retained by the Symantec Endpoint Protection Manager versions 11.0. or 12.1

    http://www.symantec.com/docs/TECH104845

    Maintaining the database

    http://www.symantec.com/docs/HOWTO55337

    Disk Space Management procedures for the Symantec Endpoint Protection Manager

    http://www.symantec.com/docs/TECH96214

    Changing the log settings to reduce the size of the database.

    http://www.symantec.com/docs/TECH105238 

     

    Check this Thread: https://www-secure.symantec.com/connect/forums/sepm-content-folder-size

    Hope that helps!!