SEPM Troubleshooting Logs

[Migration User]

 

Dears,

Are there any specific logs to check for troubleshooting SEPM problems ? what are their default  locations?

 

Thanks.

[Migration User]

If its an SEPM installation issue then you can check the sepm_inst log in the %temp% folder.

If its an post installation issue then you can check the scm-server-0.log in Drive letter:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

[pete]

sepm installed directory and the tomcat\logs will have all the set of logs. You need to enable the logging by adding line under etc\conf.properties value being scm.log.loglevel=finest.

[Migration User]

Which problems are you looking for..for different issues there are different logs in SEPM

[Migration User]

The default location is same what Sandip has mentioned Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

But there are a lot of logs , it depends what issue you are troubleshooting and then the relevant logs needs to be seen

Java -1

1. scm-server.x-logs .
2.  catalina.out file

Reporting Component or Page cannot be displayed

1. scm-server.x-logs .
2.  catalina.out file

Replication

1. scm-server.x-logs .
2.  catalina.out file
3. “Install Error”      
4. Replication0.log

 Installation issues

SEPM:

The SEPM_Inst.log gets generated in %TEMP% or in %Windir%\temp locations.

If there are issues during phase two then gather the Install_log.err.

SEP:The SEP_Inst.log gets generated in %TEMP% or in %Windir%\temp locations.

 

Client Commuincation:

 

Sylink.log

 Exsecreg logs

scm-server-x.logfor any errors.

 IIS logs

[Migration User]

Issues like ;

1. Database Corruption.

2. Server to Client Communication Error.

3. Java Errors.

and others,

I meant generically, what are the logs I can check to troubleshoot the server for most commonly known errors...

 

Thanks

[Migration User]

Java -1

1. scm-server.x-logs .
2.  catalina.out file

Reporting Component or Page cannot be displayed

1. scm-server.x-logs .
2.  catalina.out file

Replication

1. scm-server.x-logs .
2.  catalina.out file
3. “Install Error”      
4. Replication0.log

 

Client Commuincation:

 Sylink.log

 Exsecreg logs

scm-server-x.logfor any errors.

 IIS logs 

[pete]

1. Database Corruption.

in the scm-server-x.log (C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs)

2. Server to Client Communication Error.

basically in IIS logs as well as ersecreg and exsecars(C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\log

3. Java Errors. scm-serevr-x.log

 

most of the logs will be in tomcat\logs folder

[Mick2009]

One very useful method of getting an overview of all the recent errors on a SEPM:

1. From SEPM browse to Monitors > Logs
2. Log type: click System
3. Log content: click Server Activity
4. Time range: click Past month
5. Click View Log
6. Click Export and Save
7. Save the log as system_report.csv

This log can provide a wealth of information about the failures within SEPM.

The log also offers useful information about:

Content updates
Replication failures
Certificate information
LiveUpdate functions
 

The logs mentioned by other community members, above, provifde the details about each specific failure.

Hope this helps!!!

Mick

[pete]

yes, another source to know the errors or events..