You can view the status of the asynchronous actions that are taken on entities managed by an Symantec EDR appliance. These entries include the actions that are taken through the Symantec EDR console or the API. If you take the same action on multiple entities, an action record appears for each individual action.
This log is only supported for Symantec EDR appliances. Click the following link to learn more about viewing actions taken through the Endpoint Communications Channel on the entities that are registered with the Symantec EDR cloud and .
For example, assume that the same file is on Endpoint A, Endpoint B, and Endpoint C. You can delete the file from all three endpoints from the File details page with a single click. Three separate entries appear in the log: one entry showing the status of deleting the file from Endpoint A, one for Endpoint B, and a third for Endpoint C.
Tip: You can also log into SEPM and see the status of the commands that were issued from Symantec EDR on the Monitors page.
To view the status of actions taken on entities in the Actions log
Do one of the following:
In the EDR cloud console, click Logging. Then under Environment, select the appliance that contains the actions statuses that you want to view.