Logs for Symantec Integrated Cyber Defense Exchange (ICDx) are needed.
ICDx 1.1 or later
Default location of logs is /var/log/symantec/icdx
Other logs amy be located
in:
/opt/symantec/icdx/apps
/opt/symantec/icdx/repo
For further assistance with logs, contact Enterprise Support.