Symantec Endpoint Protection (SEP) Client activity reports only 1 day worth of information instead of 60 days as desired in the report.

Products

• Endpoint Protection

Issue/Introduction

 Symantec Endpoint Protection (SEP) Client activity reports only 1 day worth of information instead of 60 days as desired in the report.

 No error is provided in the SEPM.

Cause

 Insufficent log retension settings to accomplish a 60 day report.

By default, a SEPM is configured to hold 10,000 entries of System Client-Server Activity logs. Depending on the amount of activity on a set of client and the number of clients attached to a SEPM, this limit may not be large enough to hold 60 days of data.

 

Resolution

  Increasing the configured log entry retension policy and monitoring the output of a 60 day report will lead to a sucessful generation of the desired report.

Applies To

 SEP 12.1