I have an ePO server and two agent machines: one RHEL7 and one Windows 2012.
I am trying to find a way to get two pieces of information while only on the agent machine.
Firstly, to remain compliant, I need to confirm that the Anti-Virus is running with "the latest signature file".
Secondly, I need to print (without having access to the ePO) the scan frequency configuration.
Thus far for signature files I do this:
For Linux I just grep the /var/McAfee/agent/logs/masvc_* files for "signature returns <0>"
For Windows I Select-String on C:\ProgramData\McAfee\Agent\logs\mas for the same string.
For checking scan frequenc from the Agent:
I have nothing so far.
I hope the above helps.
Task specific information is located in the encrypted db files of the agent, so that is not something that will be able to be parsed. You can, however, search in the masvc log for invoking the task name for the scan task to see how frequently it invokes. As an example:
Invoking task [Product Update: Daily DAT and Content]
As for content update, you can search the mcscript log for Update succeeded to version
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center