Endpoint Protection

Hi,

i need the help to find the log of client movement from one client group to other.

If possible then pls guide me.

hi Sumit,

It's not possible please check this IDEA.

https://www-secure.symantec.com/connect/ideas/client-movement-logs-audit

Hi,

It's not possible as of now however you might see support in the upcoming releases because idea is in review status.

However, the event logs for administrator activities can be viewed in the SEPM console using the following steps:

• Select the Monitors section to the left.
• Select the Logs tab.
• Choose Log type: System and Log Content: Administrative.
• Select a Time range and click View Log.

Check following article for more details:

Which administrator activities are logged in the Symantec Endpoint Protection Manager console?

http://www.symantec.com/docs/TECH141668

Have you create the notification of Change Client Inofrmation??

If created then please find the log of that system movement from the same email alerts then do the below step

Login Console

Monitors > Logs > Log type: System, Log content: Administrative

Set the time range with specified time.

Then View Result

There log will display (computers moved, copied or deleted).

Check and match with your Notification mails.

Hope it come help you

Any update on same?

Hi

My requirement has been fulfilled. With the combination of Logs and mail triggering I have found the exact coulpit ID. Thanks once again for your solution.