SeanOfTo Posted August 12, 2014 Report post Posted August 12, 2014 In SCCM 2007, 'Forefront Endpoint Protection' had its own event logs on the server. In SCCM 2012, I am not able to find a similar event log for 'Security center Endpoint Protection'. Any direction on this matter would be much appreciated. Quote Share this post Link to post Share on other sites More sharing options...
Peter van der Woude Posted August 12, 2014 Report post Posted August 12, 2014 I can't recall ever looking in the event log for information about Endpoint Protection. What information did it show and doesn't that information simply reflect in the console (or the reports)? Minor note: It's System Center Endpoint Protection Quote Share this post Link to post Share on other sites More sharing options...
SeanOfTo Posted August 13, 2014 Report post Posted August 13, 2014 Thank you for your reply. I need these event logs to feed into the RSA envision SIEM log collector (using WMI logging and not winRM). Quote Share this post Link to post Share on other sites More sharing options...