Symantec Endpoint Protection (SEP) 14 RU1 and 12.1 RU6 MP9 introduced the ability to export SEP Manager logs in Coordinated Universal Time (UTC).

You can enable the UTC timestamp functionality using the following steps:

1. Stop the SEPM services:
   • semsrv
   • semwebsrv
   • semapisrv
   • semlaunchsrv
2. Open the conf.properties file under Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\etc
3. Add the following line:
   • scm.ext.logging.utc.enabled=true
4. Save the conf.properties file and restart SEPM services.

Note: The following logs do not support UTC. They will continue to use local time instead.

• scm_system
• scm_policy
• scm_agent_act
• scm_admin
• agt_system