This monitor returns the number of events that occur when the AntiVirus starts and stops. Auto-Protect fails to perform a successful side-effects repair for adware or spyware.The computer is not protected with definitions.New definitions are downloaded with errors by a scheduled definitions update.This monitor returns the number of events that occur when the adware and spyware scan started or stopped with errors. Scheduled scan is snoozed/paused (delayed).Scanning fails to gain access to a file or directory.Antivirus scan started/stopped with errors.This monitor returns the number of events that occur when: This monitor returns the number of the Virus Found events. In the Message field, this component returns the date of last SEP update in the following format: Month/Day/Year. This monitor returns the number of days passed since the last SEP update. It also provides network threat protection and application and device control for the client. This service provides communication with the Symantec Endpoint Protection Manager.

This monitor returns the CPU and memory usage of the Symantec Management Client service. This service provides malware and threat protection for Symantec Endpoint Protection. This monitor returns the CPU and memory usage of the Symantec Endpoint Protection service.

Examining the Windows system and application log files should provide information pertaining to the issue. Returned values other than zero indicate an abnormality. SAM API Poller templates are also available.Īll monitors should return values of zero. Component monitorsĬlick here for an overview about SAM application monitor templates and component monitors. WinRM must be installed and properly configured on the target server.Īdministrator on target server. This template allows you to monitor Symantec Endpoint Protection client services and major events from the application event log.

Symantec 14