Are the Application Control Logs from Symantec Endpoint (SEP) Manager collected by Symantec Event Collector for SEP

Article Id: 156709

Status: Published

Updated On: 27-08-2012 05:11

Legacy Id: TECH192387

Products:

Security Information Manager

Issue/Introduction:

The SEP collector does collect these example as par of the AgentBehaviourLogQuery.

Example of event in SEP Console:

Event in SSIM console

Resolution:

Make sure the default filter "AgentBehavior Logs" is not enabled.