When creating a Host Integrity policy, there's a function called "Utility: Log Message". This function makes a registry entry when the condition is met. The log messages written to the registry are only cleared when the Endpoint Protection (SEP) services are restarted.
Symantec is currently investigating this issue.