Endpoint Protection

Hi,

Does anybody knows where to find the scan logs on Symantec Anti Virus for Macintosh?
If so, could you please provide me simple procedure locating scan logs from the Symantec console?
Any ideas are appreciated.

Thanks.

Wow a MAC...  haven't tried this but, can you see the client on the SAV console?

Or how about check the client logs on the client computer instead?

SAV for MAC was only installed as unmanaged client.
That is the problem, can't see the scan log from the MAC computer.
Any other idea?

Dont you see this under Tools->View History menu in your SAV client window?

How about the logs for: e.g. The last time a full system scan occure, or the scan was canceled or success. or logs for virus def. update?

There are no logs for virus scan. Its all in the database only
For virus def updates, you will find a log in /Library/Application Support/Norton Solutions Support/LiveUpdate/liveuptd.log

Hi Jaydee,

The scan log for the clients can only be seen from the Symantec Administration console and only when the scan is launched from the console itself. Hope below link will help you further understand the query.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111493438598

thanks

Thanks for the link..It supports my query.

In doing some testing for a case I determined that an entry is written into the Mac Console log (All Messages, I believe) of the local client.  This entry will look something like this:

May 2 10:50:01 sandra -n[1798]: Try #0, for , result = 0\n
May 2 10:50:01 sandra -n[1798]: launch for id = 1 event = NVsi result = 0\n

However, I had a case where a customer was calling to complain that they were sick of getting emailed when scans run.  I was perplexed, because SAV Mac has no provision for email alerts.  After some research, though, I determined that cron (which is how Symantec Scheduler schedules itself) generates an email to [user]@[Machine name], and this particular machine name was an FQDN.

If you open a Terminal window and type in mail, you should see messages from cron.  I just did a test and the message it generated shows scan results.  (This is on the local Mac computer, which would be helpful for unmanaged clients.)

You could even, in theory, set a .forward in your user directory to redirect to another email address.  

I hope this helps!

sandra