SEP: Internals of Reporting Component
About logged events from your network (from admin guide): Symantec Endpoint Protection pulls the events that appear in the reports from the event logs on your management servers. The event logs contain time-stamps in the clients’ time zones. When the management server receives the events, it converts the event time-stamps to Greenwich Mean Time (GMT) for insertion into the database. When you create reports, the reporting software displays information < p>about events in the local time of the computer on which you view the reports. Some types of events such as virus outbreaks can result in an excessive number
Read more