search cancel

Endpoint Protection Manager External Logging shows time sent to Syslog Server not time of event

book

Article ID: 163869

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

You enabled External Logging in the Symantec Endpoint Protection Manager (SEPM) to send Symantec Endpoint Protection (SEP) client logs to a Syslog Server. When looking at the SEP client logs from the Syslog Server, you notice that the client event times are not included in the syslog message and only see the times when the client logs were sent to the Syslog Server.

 

Cause

The SEP client event times were not included in the syslog message for the client logs going to the Syslog Server.

 

Resolution

This issue is fixed in Symantec Endpoint Protection Manager 14.  For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH 103088: Download the latest version of Symantec Endpoint Protection