At times there are external logging discrepencies when comparing to Risk reports. This happens when there are multiple Symantec Endpoint Protection Managers (SEPM) in a load balanced configuration.
This issue is fixed in Symantec Endpoint Protection 14.2 RU2. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.
1. Go to C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\conf.properties.
2. Set this parameter in conf.properties file, then restart the SEPM service.