Filtering Items In The Event Log - Symantec 10551441 - AntiVirus Corporate Edition Client Manual

Filtering items in the Event Log

You can filter events in the Event Log by Date, Event, Computer, User, or Scan
Type that logged the event. You can also filter by date or by categories of events,
so that you can view information for a few days or information for the last few
years.
Filtering items by date
You can filter items that appear in the Risk History, Scan History, Event Log,
and Tamper History by date.
By default, Symantec AntiVirus enters events in the Event Log in the order in
which the events happen. All of the events that occurred on your computer since
Symantec AntiVirus was installed are stored.
When you change the date range, Symantec AntiVirus does not delete the
information. For example, if you change the information that appears to Today,
the other information continues to exist, but does not appear in the history or
log.
To filter items by date
1 On the Histories menu, click Event Log.
2 Click the All Items (or date range) drop-down list box.
3 Select a filter.
4 If you clicked Selected range, select a start date and an end date, and then
click OK.
Filtering the Event Log by event category
After you have displayed the information that you want to view in the Event
Log, you can save the data as it is displayed on your computer to a comma-
separated value (.csv) file.
Events are divided into the following categories in the Event Log:
Configuration change
■
Symantec AntiVirus startup/shutdown
■
Virus definition file
■
Scan omissions
■
Forward to Quarantine Server
■
Deliver to Symantec Security Response
■
What to do if a virus or security risk is found
Viewing the Event Log
85