ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to view the Audit Log for Symantec Endpoint Protection Manager 12.1 RU5 Web Services

book

Article ID: 161172

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Beginning from Symantec Endpoint Protection 12.1 RU5 (SEP 12.1.5), the Symantec Endpoint Protection Manager (SEPM) maintains an audit log of calls to its web services. You want to know how to view this audit log.

Resolution

The audit log may be viewed by running the following query against the SEPM database:

use sem5;
select DATEADD(s, TIMESTAMP/1000, '1970-01-01 00:00:00') as DATETIME, *
     from V_AUDIT_LOG order by DATETIME desc;

if the datepart 'S' could not  be identified by the Sygate database version, pleaset try

use sem5;
select DATEADD(second, TIMESTAMP/1000, '1970-01-01 00:00:00') as DATETIME, *
     from V_AUDIT_LOG order by DATETIME desc;