Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

What are the possible event log entries are and their definition.

  • 1.  What are the possible event log entries are and their definition.

    Posted Nov 03, 2014 11:52 AM

    I found TECH article # 186925 (http://www.symantec.com/docs/TECH186925) that the Symantec Endpoint Manager 12.1 writes to the Application Log.  However, it has been my experience that you can find Events in the Symantec Endpoint Protection Log as well.

    If you are trying to monitor Events for Symantec Endpoint Manager, is it good practice to look at the Application Log or the Symantex Endpoint Protection Log or maybe both?  



  • 2.  RE: What are the possible event log entries are and their definition.

    Posted Nov 03, 2014 11:53 AM

    You want to find these in the System log on the SEP client.

    SEP will also write to it's own Windows event log called Symantec Endpoint Protection Client.

    Capture_38.JPG

    However, the logs on the SEP client will contain more info for sure.



  • 3.  RE: What are the possible event log entries are and their definition.

    Posted Nov 03, 2014 12:01 PM

    For SEPM look under application log



  • 4.  RE: What are the possible event log entries are and their definition.

    Posted Nov 03, 2014 08:14 PM

    Thank you.  I appreciate the input.