Endpoint Protection

Hi Team,

Is there any Event ID generates on out of definition for SEP clients in any condition if client is out of definition for 2,3 or more days.

You can set alerts for when clients go out of date.

Monitors tab <> Notifications <> Notification Conditions

Add the alert for 'Virus definitions out-of-date'\

The SEP client also has a custom event log, content updates would be showing an Event ID of 200, 202..etc.

Thanks, is there particularly any EVENT ID generates on windows for SEP out of definition, if SEP client is out of date n-1 or n-2 or any more days. Please let us know.

I don't have an out of data machine to check. It should be in the SEP custom event log though. All event IDs for content look to be in the 200s.

the event ID 7 will get generated when the definition is successfully installed, so you can probably check for the machines which doesn't have event id 7

Unfortunately I couldnt find the actual data. I will try to figure it out by making the client to go out of date. But as praveen said, Event ID 7 helps to check def installation status.

Thank you, please , it will help us, we are looking for out of definition event ID only

Have you just checked an out of date client? It shouldn't be difficult to spot in the event log.

Checked with support team, Unfortunately, no event does get generated. thanks for your help