Endpoint Protection Manager event log entries

Products

• Endpoint Protection

Issue/Introduction

You would like to know what the possible event log entries are.

Environment

Symantec Endpoint Protection Manager (SEPM)

Resolution

The following table describes the events that the Symantec Endpoint Protection management server writes to the Windows Event Log.

 

Event Source	Category	EventID	Type	Target Log	Message Text
COMPLIANCE	Licensing	7100	Information	SEPM	Symantec Endpoint Protection license state See Licensing Message Text .
TO-EXPIRE	Licensing	7101	Warning	SEPM	Symantec Endpoint Protection license is about to expire. See Licensing Message Text .
OVERDEPLOYED	Licensing	7103	Error	SEPM	Symantec Endpoint Protection is over-deployed; licensed seat count is exceeded. See Licensing Message Text .
TRIAL	Licensing	7104	Information	SEPM	Symantec Endpoint Protection trial license is installed. See Licensing Message Text .
UPGRADE	Licensing	7105	Information	SEPM	Symantec Endpoint Protection upgrade license is installed. See Licensing Message Text .
COMPLIANCE	Licensing	7110	Information	SEPM	Symantec Network Access Control license state See Licensing Message Text .
TO-EXPIRE	Licensing	7111	Warning	SEPM	Symantec Network Access Control license is about to expire. See Licensing Message Text .
OVERDEPLOYED	Licensing	7113	Error	SEPM	Symantec Network Access Control is over-deployed; licensed seat count is exceeded. See Licensing Message Text .
TRIAL	Licensing	7114	Information	SEPM	Symantec Network Access Control trial license is installed. See Licensing Message Text .
UPGRADE	Licensing	7115	Information	SEPM	Symantec Network Access Control upgrade license is installed. See Licensing Message Text .
DOWNLOADED SUCCESSFUL	Content	7200	Information	SEPM	Content was successfully downloaded to the Symantec Endpoint Protection management server. See Content Download Message Text .
DOWNLOADED FAILED	Content	7201	Warning	SEPM	Content could not be downloaded to the Symantec Endpoint Protection management server. See Content Download Message Text .
CONTENT LOADED SUCCESSFULLY	Content	7202	Information	SEPM	Content was successfully installed on the Symantec Endpoint Protection management server. See Content Download Message Text .
CONTENT LOADED FAILED	Content	7203	Warning	SEPM	Content could not be installed on the Symantec Endpoint Protection management server. See Content Download Message Text .
LiveUpdate Session Started	Content	7210	Information	SEPM	LiveUpdate session started.
LiveUpdate Session Completed	Content	7211	Information	SEPM	LiveUpdate session completed. Total elapsed time: minutes.
Tomcat Service start	Server	4	Information	Application and SEPM	Symantec Endpoint Protect Manager is starting in response to a start request from the Service Control Manager. This is an informational message only. No user action is required.
Tomcat Service stop	Server	5	Information	Application and SEPM	Symantec Endpoint Protect Manager is terminating in response to a stop request from the Service Control Manager. This is an informational message only. No user action is required..
Apache Service start	Server	1	Information	Application and SEPM	Symantec Endpoint Protect Manager Webserver is starting in response to a start request from the Service Control Manager. This is an informational message only. No user action is required.
Apache Service stop	Server	1	Information	Application and SEPM	Symantec Endpoint Protect Manager Webserver is terminating in response to a stop request from the Service Control Manager. This is an informational message only. No user action is required.
SQL DB Service start	Server	17162	Information	Application	SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
SQL DB Service stop	Server	17148	Information	Application	SQL Server is terminating in response to a stop request from the Service Control Manager. This is an informational message only. No user action is required.