Endpoint Protection Small Business Edition

 View Only

  • 1.  Where can I find SEPM logs?

    Posted Jun 12, 2013 04:37 PM

    Hello,

    I'm trying to find logs that are sent to the "master logging server" which is configured in the External Logging settings for Local Site. Can anyone point me to the windows file path these would be located? The overall objective I'm trying to accomplish is to pull the scan logs for a specific client.



  • 2.  RE: Where can I find SEPM logs?

    Posted Jun 12, 2013 08:45 PM

    Try:

    C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\log

    Should be different folders in here pertaining to each log type



  • 3.  RE: Where can I find SEPM logs?

    Posted Jun 12, 2013 10:29 PM

    Also you can try this tool

    Symantec Endpoint Protection Manager Log Collecting Tool

     

    Article:TECH105955  |  Created: 2008-01-18  |  Updated: 2011-12-09  |  Article URL http://www.symantec.com/docs/TECH105955

     



  • 4.  RE: Where can I find SEPM logs?

    Broadcom Employee
    Posted Jun 12, 2013 10:29 PM

    this is the location "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\dump" folder



  • 5.  RE: Where can I find SEPM logs?

    Broadcom Employee
    Posted Jun 12, 2013 10:33 PM

    additional helpful information link

    Exporting log data to a text file

    http://www.symantec.com/business/support/index?page=content&id=HOWTO81168



  • 6.  RE: Where can I find SEPM logs?

    Trusted Advisor
    Posted Jun 13, 2013 07:55 AM

    Hello,

    What version of SEPM 12.1 are you running??

    NOTE: SEPM SBE 12.1 does not have the feature of configuring the External Logging settings for Local Site.

    In case of SEPM 12.1 (EE), when you export data from the logs to a text file, by default the files are placed in a folder. That folder path is drive:\​Program Files\​Symantec\​Symantec Endpoint Protection Manager\data\dump. Entries are placed in a .tmp file until the records are transferred to the text file.

    If you do not have Symantec Network Access Control installed, some of these logs do not exist.

    Check these Articles:

    Exporting log data

    Exporting log data to a comma-delimited text file

    Exporting data to a Syslog server

    Exporting log data to a text file

    Hope that helps!!



  • 7.  RE: Where can I find SEPM logs?

    Broadcom Employee
    Posted Jun 14, 2013 09:44 AM

    Hi,

    Thank you for posting in Symantec community.

    I would be glad to answer your question.

    You have created thread in Small Business Edition (SBE) queue but it seems you are using Enterprise Edition (EE).

    Log text file names for Symantec Endpoint Protection shows the correspondence of the types of log data to the names of the exported log data files.

    I think you will have to check agt_scan.log file to get the info which you are looking for.

    Reference: Exporting log data to a text file

    http://www.symantec.com/docs/HOWTO27572