Are the Application Control Logs from Symantec Endpoint (SEP) Manager collected by Symantec Event Collector for SEP

book

Article ID: 156709

calendar_today

Updated On:

Products

Security Information Manager

Issue/Introduction

The SEP collector does collect these example as par of the AgentBehaviourLogQuery.

Example of event in SEP Console:

 

Event in SSIM console

 

Resolution

Make sure the default filter "AgentBehavior Logs" is not enabled.

 


Attachments