Event Viewer Application log is flooded with Event ID 15 "Updated Symantec Endpoint Protection Status Successfully to SECURITY_PRODUCT_STATE_ON".

book

Article ID: 171383

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Every five minutes an Event ID 15 is generated in the Application Event log by Symantec Endpoint Protection 14.x builds.

Cause

SEP called a routine to update the product status every 5 min causing Event Viewer to flood with the Event ID 15.

Environment

Microsoft Windows 10

Resolution

This issue is fixed in Symantec Endpoint Protection 14 RU1 MP2  For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.