System center endpoint protection on standalone machine

Question

Hello,

I am installing System center endpoint protection on a windows server 2012.

Where are the logs for the Agents/Clients?

Where are the logs for the Definition Updates? These logs will show the share where they are trying to grab the updates and the process to deploy the updates to the machines.

• There is no MEMCM.

Thanks,
Dom

Answer 1

Hi, @Duchemin, Dominique

Thank you for posting in Microsoft Q&A forum.

Try to check the Event Viewer log, under the "Applications and Services Logs" section. Look for the "Microsoft Antimalware" log.

The logs for the definition updates can be found in the following directory: %ProgramData%\Microsoft\Microsoft Antimalware\Support. This log file contains information about the updates that have been downloaded and installed on the client machines.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".