Symantec Endpoint Protection (SEP) Client activity reports only 1 day worth of information instead of 60 days as desired in the report.

book

Article ID: 156145

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

 Symantec Endpoint Protection (SEP) Client activity reports only 1 day worth of information instead of 60 days as desired in the report.

 No error is provided in the SEPM.

Cause

 Insufficent log retension settings to accomplish a 60 day report.

By default, a SEPM is configured to hold 10,000 entries of System Client-Server Activity logs. Depending on the amount of activity on a set of client and the number of clients attached to a SEPM, this limit may not be large enough to hold 60 days of data.

 

Resolution

  Increasing the configured log entry retension policy and monitoring the output of a 60 day report will lead to a sucessful generation of the desired report.


Applies To

 SEP 12.1