Endpoint Protection

 View Only

External logging in SEPM with Failover configuration

  • 1.  External logging in SEPM with Failover configuration

    Posted Dec 12, 2019 12:36 PM

    My company has two SEPMs and we're trying to configure External Logging.  We have the primary SEPM configured to export logs to a dump file and our SIEM agent is ingesting the logs in the dump files. As long as the SEMP in datacenter a is active it writes logs to the *.tmp files in the dump directory.  If the SEPM in datacenter b becomes active, it does not write logs to the *.tmp files in the dump directory.  How do we make sure that whichever SEMP is active write *.tmp files in the dump directory(C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\dump\)?