ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Are the Application Control Logs from Symantec Endpoint (SEP) Manager collected by Symantec Event Collector for SEP

book

Article ID: 156709

calendar_today

Updated On:

Products

Security Information Manager

Issue/Introduction

The SEP collector does collect these example as par of the AgentBehaviourLogQuery.

Example of event in SEP Console:

 

Event in SSIM console

 

Resolution

Make sure the default filter "AgentBehavior Logs" is not enabled.

 


Attachments