Endpoint Protection

# Need to know how to extract the SEP client log files & Dat files which is sent to the SEPM from the clients.
# Specifically want to know which log from the client has the information about the component installed. [Any specific DAT files or Registry entries].

# What kind of files sent to SEPM from the clients & Location of those files on clients & How it can extracted to a readable format.

Check the Logs directory on a client

For XP/2003 it would be C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\{Client version}\Data\Logs

For Win7/2008 it would be C:\ProgramData\Symantec\Symantec Endpoint Protection\{Client version}\Data\Logs

They should have a .log extension and you can open in notepad. They will be readable.

we need a readable log which can clearly mention which components installed on the client computer. or else any registry which mentions about the components on a client. 

Note: Not from the SEPM logs.

Here is some reference about what can you check directly in registry:

https://www-secure.symantec.com/connect/articles/symantec-endpoint-protection-few-registry-tweaks