Endpoint Protection

In mcafee, the agent log could be viewed from any computer using http://client_computer_name:8081

Does symantec endpoint have any such capability? How do I view the System logs stored on the client remotely?

I don't think you have such an option in SEP for individual client log views.

You certainly have remote management console.

http://<SEPM IP>:8014/Reporting

you cannot access client and view log, however you can use remote SEPM console and login to view logs.

If i want to see the logs for computer X, do I need to go to computer X to view them? Can I access them via

\\clientpc\c$\<log folder path> ??

Are the log files stored somewhere on the client computer? What is the default location?

You can find some here.

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Logs

Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.XXXX.XXX.XXX\Data\Logs

would be the location for logs

Hello,

You could Client Logs from SEPM.

I would suggest you to check this Thread:

https://www-secure.symantec.com/connect/forums/trying-determine-when-clients-are-updated-server

Hope that helps!!

If you want to have access to all clients logs, you can log in to the console, got to Monitors > Logs tab and select proper log type.

If you want to have access to the logs from a specific client, you just need to follow the same steps, plus you need to click on "Advanced settings" to filter out the results, and get only information about the host you want (there are more filtering options available if needed).

It seems when i check System -> Client Activity logs on Monitors -> Logs tab from SEP Manager i can see only last 24 hours even i choose Past three months or more. But when i check on local computer i can see all logs. Is this expected situation?