Hi
I'm having a problem getting the External Logging to work properly on SEPM 12.1.2 . I'm fine with configuring it via Admin -> Servers -> Local Site -> Configure External Logging Settings. That’s all OK.
I have set the Export Logs to a Dump File option and on the Log Filter Tab, enabled all Client Logs options.
I then put the EICAR test file on a couple of clients, got them to detect it and then waited on the SEPM to report the detection on the Home Screen.
However, when I look at the files that are produced in \data\dump, the agt_risk.log file only has an entry for the first detection. Additional detections are not making it into the log. Additionally, the .tmp files that you normally see aren't there and I suspect the logging is either stopped or is not working properly.
I have set the External Logging Update Frequency to 30 seconds so I don't think it's a matter of just waiting a while longer.
Does anyone have any ideas as to what might be the problem. It only seems to be an issue with the Client Logs. The Management Server Logs all seem to work fine.
Any tips or pointers would be much appreciated.
D.