When exporting the Symantec Endpoint Security (SES) scan logs the duration listed on scan complete events shows as "duration": 0.
Exporting logs from the ICDM (SES Portal) or via API
The SES Agent was not properly providing this information to the ICDM.
This issue is resolved in the Endpoint Protection 14.3 RU5 release, upgrade clients to this version or later to resolve this issue.