About logged events from your network (from admin guide):
Symantec Endpoint Protection pulls the events that appear in the reports from the event logs on your management servers. The event logs contain time-stamps in the clients’ time zones. When the management server receives the events, it converts the event time-stamps to Greenwich Mean Time (GMT) for insertion into the database. When you create reports, the reporting software displays information
<
p>about events in the local time of the computer on which you view the reports. Some types of events such as virus outbreaks can result in an excessive number
