OfficeScan clients log unauthorized program access instances and send the logs to the server. An OfficeScan client that runs continuously aggregates the logs and sends them at specified intervals, which is every 60 minutes by default.

To keep the size of logs from occupying too much space on the hard disk, manually delete logs or configure a log deletion schedule. For more information about managing logs, see Log Management.