The Symantec Endpoint Protection (SEP) client stores 14 days worth of logs locally by default, however the log retention settings are configurable for managed clients via the Symantec Endpoint Protection Manager (SEPM) console.
1.) Login to the SEPM console.
2.) Click on ''Clients'' page of the console, and then select the client group where the log retention settings are to be changed
3.) With the client group selected, click on the Policies tab for this group, then access the Client Log Settings.
4.) Configure client log retention settings as needed, clicking OK to commit changes when finished.
These changes will apply to the client group selected, as well as any sub-groups which are inheriting from this group.