EndPoint Logs / Info / CMD Line / Def DL

“Context -
There seemed to be a need to provide some simple instruction / reference to familiarize IT with some common tools and logs.”

posted Jun 15, 2015, 9:49 AM 

Yes, here we are again talking about logs.  Its just the nature of our business, if you want answers.  And remember our log viewer is CMTRACE.exe (available to all CM12 clients / search bar) unless its an Event log.

Logs

C:\Windows\CCM\Logs\EndpointProtectionAgent.log

C:\Windows\CCM\Logs\DataTransferService.log

C:\ProgramData\Microsoft\Microsoft Antimalware\Support\MPLOG-xxxxxxxx-xxxxxx” 

C:\Windows\Temp\MPCMDRUN.log

SEP Removal - C:\Windows\Temp\SYMEVENT.log(additional - C:\ProgramData\Symantec\Symantec Endpoint Protection\<Version>\Data\Install\Logs)

CMD Line

MPCMDRUN Syntax - %ProgramFiles%\Microsoft Security Client\MPCMDRUN.exe