Hi AllMcD
Theoretically, you are perfectly right.
Thus said, could you paste the content of the notification email you are referring to so we have a better idea of what you have been notified of.
Also, keep in mind that client logs are not kept forever, the default client log retention time is 14 days.
If the client is connected to the SEPM (as seems to be the case since you received a notification), you should also be able to see the log entry in the manager (Monitors / Logs)
If the client uploaded it to the manager, it is safe to say it is on the client as well.
-
Symantec Support
MCSE / CCNA