Video Screencast Help

view client system log remotely

Created: 24 May 2012 | 8 comments

In mcafee, the agent log could be viewed from any computer using http://client_computer_name:8081

Does symantec endpoint have any such capability? How do I view the System logs stored on the client remotely?

Comments 8 CommentsJump to latest comment

NRaj's picture

I don't think you have such an option in SEP for individual client log views.

You certainly have remote management console.

http://<SEPM IP>:8014/Reporting

pete_4u2002's picture

you cannot access client and view log, however you can use remote SEPM console and login to view logs.

Anand_N's picture

If i want to see the logs for computer X, do I need to go to computer X to view them? Can I access them via

\\clientpc\c$\<log folder path> ??

Are the log files stored somewhere on the client computer? What is the default location?

NRaj's picture

You can find some here.

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Logs

pete_4u2002's picture

Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.XXXX.XXX.XXX\Data\Logs

would be the location for logs

Mithun Sanghavi's picture


You could Client Logs from SEPM.

I would suggest you to check this Thread:

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

John Q.'s picture

If you want to have access to all clients logs, you can log in to the console, got to Monitors > Logs tab and select proper log type.

If you want to have access to the logs from a specific client, you just need to follow the same steps, plus you need to click on "Advanced settings" to filter out the results, and get only information about the host you want (there are more filtering options available if needed).

Please remember to mark the proper comment as SOLUTION:
 - to identify threads that do not require further assistance
 - to let other visitors know how to fix such issue

Osman Nuri's picture

It seems when i check System -> Client Activity logs on Monitors -> Logs tab from SEP Manager i can see only last 24 hours even i choose Past three months or more. But when i check on local computer i can see all logs. Is this expected situation?