You have legacy clients in your environment and want to view the logs in the Symantec Endpoint Protection Manager (SEPM) 12.1.x. Specifically, you have computers protected by Symantec AntiVirus for Linux (SAVFL) and wish to have their logs available to the Symantec Endpoint Protection Manager for viewing and use in reports. SAVFL Reporter is already installed and configured on the Linux endpoints.
Legacy reporting can be enabled for Symantec Endpoint Protection 12.1.x by following these steps:
Note: As of Symantec Endpoint Protection 12.1.5, legacy SAV for Linux clients that no longer send reports are purged from the database after 30 days. To change this value, follow these steps:
For SAVFL Reporter logs:
For Symantec AntiVirus 10.1 client logs:
Note: Symantec AntiVirus 10.1 is no longer a supported product. These instructions are provided for your convenience.
In the Symantec AntiVirus (SAV) Symantec System Center (SSC), perform the following tasks: