Endpoint Protection

The Scan Engine Implementation Guide lists a number of events and the various logging levels they occure at. Table 8-2 in the version I am looking at.

Is there any information available that lists the Event ID, Type, Source, etc. for the events listed that would then enable me to detect specific occurence in a Windows Event log and alert adminsitrators accordingly.

Thanks in advance

James

Note: Posted against EndPoint Security as I could not find options to post specifically for Scan Engine.

Not sure if this is what you need, but give it a quick look.

How to read and convert the Symantec Scan Engine 5.x logfile

http://www.symantec.com/business/support/index?page=content&id=TECH84204&actp=search&viewlocale=en_US&searchid=1297719284935

Best,

Thomas

Thanks for response but I had already found this.

What I was looking for was for someway to distinguish between different events written to the Windows Event log.

The information in the manual has a high level description of the event and the level it is logged at. e.g. "Definitions update failure" logged as error. But it doesn't give me anything else i could use to distinguish this from "Licensing Error" also logged asan error so I can raise alerts on some events but not others.

For other software I have experience with I have found they have different Event IDs

I hope that explains what I am looking for.

Cheers

James

I am not finding anything that describes what you are seeking. There are not too many experts with the Scan engine product here in Connect, so maybe a quick call to support may help you find an answer.

Best,

Thomas

No probs, thanks for your help.

James