4 Replies Latest reply on Nov 25, 2015 12:06 PM by penoffd

    Latency (Time Delta) with Symantec EP

    penoffd

      We have issues with the data coming into our ELM from the Symantec AV server in that the data has significant latency.  That is, the logs coming in as they're compiled by SEP can be as old as two hours from the actual event time.

       

      I realize this isn't an ELM issue, but an issue with SEP, but all the tinkering I've done so far doesn't seem to help. I'm wondering if any other users have encountered this situation, and if so, how they dealt with it.

       

      Thanks,

       

      Dan