Event Viewer Application log is flooded with Event ID 15 "Updated Symantec Endpoint Protection Status Successfully to SECURITY_PRODUCT_STATE_ON".

Products

• Endpoint Protection

Issue/Introduction

Every five minutes an Event ID 15 is generated in the Application Event log by Symantec Endpoint Protection 14.x builds.

Environment

Microsoft Windows 10

Cause

SEP called a routine to update the product status every 5 min causing Event Viewer to flood with the Event ID 15.

Resolution

This issue is fixed in Symantec Endpoint Protection 14 RU1 MP2  For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.