ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Are the Application Control Logs from Symantec Endpoint (SEP) Manager collected by Symantec Event Collector for SEP
Article ID: 156709
Security Information Manager
The SEP collector does collect these example as par of the AgentBehaviourLogQuery.
Example of event in SEP Console:
Event in SSIM console
Make sure the default filter "AgentBehavior Logs" is not enabled.