Are the Application Control Logs from Symantec Endpoint (SEP) Manager collected by Symantec Event Collector for SEP

Products

• Security Information Manager

Issue/Introduction

The SEP collector does collect these example as par of the AgentBehaviourLogQuery.

Example of event in SEP Console:

 

Event in SSIM console

 

Resolution

Make sure the default filter "AgentBehavior Logs" is not enabled.