Symantec Endpoint Protection Manager logs are sometimes not completey replicated between sites.
One scenario: SEPM A is replicating logs in both directions with SEPM B. After several successful replication sessions, you restore SEPM B's database from an older backup. Subsequent replication sessions do not restore logs to SEPM B that were generated on that SEPM after the database backup had been taken.
When replicating logs, a Symantec Endpoint Protection Manager will send only those logs that have been generated on that Manager. In the scenario above, even though SEPM A has copies of SEPM B's logs from previous replication sessions, SEPM A will not re-send those logs back to SEPM B. Neither will SEPM A re-send SEPM B's logs to a third SEPM C.
This behavior is currently by design, to prevent circular log replication.
Client Activity log is not replicated completely after a DB restore
Imported Document ID: TECH161319
Subscribing will provide email updates when this Article is updated. Login is required.