SeanOfTo

terraj01, I am having the same issue. Can you let me know how did you resolve this?

Thank you for your reply. I need these event logs to feed into the RSA envision SIEM log collector (using WMI logging and not winRM).

In SCCM 2007, 'Forefront Endpoint Protection' had its own event logs on the server. In SCCM 2012, I am not able to find a similar event log for 'Security center Endpoint Protection'. Any direction on this matter would be much appreciated.