Protection Engine Scan Log Information

Products

• Protection Engine for Cloud Services
• Protection Engine for NAS
• Protection for SharePoint Servers

Issue/Introduction

You need information about Symantec Protection Engine (SPE) scan logs, including format, possible Event IDs, and how to parse through the raw logs. This information can help you plan integration of SPE logging with third party tools such as Splunk or in-house developed monitoring tools.

Resolution

The document attached to this article contains the following information:

• Log Format Details
• Log Field Description
• Windows Event ID Details (only when logwindows is enabled)
• Windows Event Log Details (only when logwindows is enabled)
• Information regarding how to parse the raw logs (without using the logconverter utility)

Note: The raw .log files can be converted to human readable format by using the logconverter utility. See article 164643 for more information.