Endpoint Protection Client Activity Log RRS feed

  • Question

  • Hello

    I'd like to know how long SCCM 2012 keep the Endpoint protection client activity logs (logs of scan,detection, quarantine..etc) and if i can change it?


    Monday, May 5, 2014 11:59 AM


  • HI,

    Endpoint Protection history data is deleted after 365 days, it can be controlled in the Site Maintenance task "Endpoint Protection is Delete Aged Endpoint Protection Health Status History Data"

    There is also a setting for "Delete Aged Threat Data" which is set to 30 days. It depends on which level of details you are after but it sounds like you should increase the "Delete Aged Threat Data"


    -- My System Center blog ccmexec.com -- Twitter @ccmexec

    Monday, May 5, 2014 12:24 PM