Symantec Endpoint Protection (SEP) Client activity reports only 1 day worth of information instead of 60 days as desired in the report.
No error is provided in the SEPM.
Insufficent log retension settings to accomplish a 60 day report.
By default, a SEPM is configured to hold 10,000 entries of System Client-Server Activity logs. Depending on the amount of activity on a set of client and the number of clients attached to a SEPM, this limit may not be large enough to hold 60 days of data.
Increasing the configured log entry retension policy and monitoring the output of a 60 day report will lead to a sucessful generation of the desired report.
Imported Document ID: TECH184978
Subscribing will provide email updates when this Article is updated. Login is required.