This article lists the logs required for troubleshooting failed Symantec Endpoint Protection (SEP) 12.1 client installations.
The SEP install first runs the Microsoft Installer (MSI) install, and then runs the Symantec Installer Server (SIS).
Look in the file system locations
Look in C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.XXX.XXXX\Data\Install\Logs, which contains the following:
For rollbacks during a fresh install check SEP_INST.log and SIS_INST.log:
Look in %Program Files%\Symantec\Symantec Endpoint Protection\<latest-version>\Scripts for the following:
Look in %AllUsersProfile%\Application Data\Symantec\Symantec Endpoint Protection\<latest-version>\Data\Scripts\ for the following:
Setupapi.log files contain information about teefer, and will reveal problems if teefer fails to load. Teefer is considered a hardware driver.
You can also run SymDiag, which automatically collects most of these files.