The Virus Definition date for the Symantec Protection Engine (SPE) listed in the SPE Console shows as blank after upgrading to version 9.2. The report.xml, however, confirms that the virus definitions are up to date. Reviewing the Rest API debug logs show entries similar to the following:
INFO symantec.spe.sperestapi.SpeRestApiApplication:55 - Starting SpeRestApiApplication v9.1.0.18 using Java 17.0.15 on <SPE_SERVER> with PID #### (<SPE_INSTALL_FOLDER>\RestAPI\sperestapi.jar started by <USERNAME> in <SPE_INSTALL_FOLDER>\RestAPI)
...
[https-jsse-nio-8008-exec-2] INFO symantec.spe.helper.XMLReaderWriter:158 - reading Attribute: /report/DefinitionDateTimeVersion/AntiVirus/@version
[https-jsse-nio-8008-exec-2] DEBUG symantec.spe.helper.XMLReaderWriter:164 - /report/DefinitionDateTimeVersion/AntiVirus/@version:
SPE and SPE Console 9.2
In SPE 9.2 the virus definitions date are reported as DefinitionDateVersion. Prior versions report the virus definitions date as DefinitionDateTimeVersion. After upgrade the sperestapi.jar file was replaced with the sperestapi.jar from a previous version of SPE.
Revert the sperestapi.jar back to the 9.2 version or, if the sperestapi.jar is not available, re-install the SPE.