Installing And Configuring Event Logging To The Information Manager - Symantec 10547849 - Mail Security For SMTP Installation Manual

Installing and configuring event logging to the
Information Manager
Integrating Symantec Mail Security with Symantec Security Information Manager

Installing and configuring event logging to the Information Manager

Administration events that are sent to the Information Manager
Table B-4
(continued)
Event ID
(SES_EVENT_<Unique ID>)
SES_EVENT_CONFIGURATION_CHANGE
(92008)
SES_EVENT_CONFIGURATION_CHANGE
(92008)
SES_EVENT_CONFIGURATION_CHANGE
(92008)
SES_EVENT_CONFIGURATION_CHANGE
(92008)
SES_EVENT_VIRUS (122000)
The logging of events to the Information Manager is in addition to, and
independent of, the logging of events within the Symantec Mail Security for SMTP
logging feature.
To configure logging to the Information Manager, you must complete the following
steps:
Severity Event class
Informational symc_config_update
Informational symc_config_update
Informational symc_config_update
Informational symc_config_update
Major symc_config_update
63
Rule
Description
(Reason
sent)
Sender
group
members
imported
Group
policy
members
imported
Component
is not active
Administrator
account
change
Virus
outbreak