SEPM LiveUpdate Status Log

[Aleksandar Devecerski]

Hi all

I’m preparing to submit support case regarding issue we’re having with SEPM update duration (it takes more then 1 hour for SEPM to complete new definitions DL/preparation). I would like to submit couple of LiveUpdate Status logs (below) as an example but I’m unable to find actual log file.

Does this LiveUpdate Status window have log file and where is it located?

Regards

  

[Mick2009]

Hi a.devecerski,

Thanks for the post. The following article should have what you need:

Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager
http://www.symantec.com/docs/TECH105924

Please do keep this thread up-to-date with your progress!

[Aleksandar Devecerski]

Thank you Mick.

I was aware of both log files in the article you pointed out, but they contain much more info then needed and I'm not sure if they say what I want to report. At least not clearly. SEP Manager's LU Status window would be ideal to show Symantec support people exactly what I want:
13. novembar 2017. 13.29.45 CET:  Successfully downloaded...
13. novembar 2017. 12.17.54 CET:  Cleaned up 1 LiveUpdate downloaded content...
13. novembar 2017. 12.11.31 CET:  No updates found...
13. novembar 2017. 12.11.31 CET:  No updates found...

You see, the issue I would like to report is none of those mentioned in the article. My SEPM downloads and distributes definitions just fine, but it takes more then 1 hour to proces "Virus and Spyware definitions SDS Windows32 14.0 RU1" & "Virus and Spyware definitions SDS Windows64 14.0 RU1". No matter if SEPM downloads them automatically (LU download schedule is set to "Continuously") or I do it manually (using LUALL.EXE or putting JDB files in Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming folder). Also, it happens with both Standard and Rapid Release definitions.

It is not that big of deal, but during this 70 or something minutes period SEPM is somewhat slugish generally and totally unresponsive regarding editing policies. You can view them but any save command blocks SEPM GUI.

Regards