Endpoint Protection

 View Only
  • 1.  View client scan omissions in SEPM

    Posted Feb 09, 2011 04:58 PM

    I'm trying to find out how or if I can generate a report on the files that have been omitted by a scheduled scan on any or all clients in SEPM. I'm not looking to see how many, I want to see the names and paths of the files were omitted on some or all of my clients.

    If I look at the AV and AS "system" log on a client, there are entries for "Scan omissions" which show the information on the files that were omitted from the scheduled scan due to various errors.

    In SEPM, My client groups  AV and AS policy has "file not scanned" checked under miscellaneous-> log handing

    The question is really.... Can I view client system logs in SEPM, if yes, How?

     



  • 2.  RE: View client scan omissions in SEPM
    Best Answer

    Posted Feb 09, 2011 05:19 PM

    Go to Monitors | Logs

    Set Log type to  System

    Set Log content to Client Activity

    It's not pretty but this is where you will see files not scanned



  • 3.  RE: View client scan omissions in SEPM

    Posted Feb 10, 2011 01:38 PM

    Try this too:

     

    How to enable "Vpdebug logging" on Symantec Endpoint Protection 11.0

    http://www.symantec.com/business/support/index?page=content&id=TECH102939&locale=en_US

     

    How to log all files and directories scanned during On-Demand / Scheduled Scan with Symantec Endpoint Protection 11.0

    http://www.symantec.com/business/support/index?page=content&id=TECH103126&locale=en_US



  • 4.  RE: View client scan omissions in SEPM

    Posted Feb 10, 2011 05:39 PM

    Thanks Brian,

     I was able to adjust the settings to pretty much just get the omissions by changing the advanced settings using....

    Event type: Antivirus engine events

    Severity:  Error and above

     

    Thanks blenahan... Although the solution works, I was trying to avoid having to go to each client