symantec = {
 symantec_anti_virus_corporate_edition = {
  event = {

   2 = "Scan Complete"
   3 = "Scan Start"
   4 = "Pattern (.vdb) Update"
   5 = "Infection Detected"
   6 = "Scan Fail - No access to File"
   7 = "Load Pattern (new .vdb)"
   11 = "Realtime	Attachment Scan"
   12 = "Server Config Update"
   13 = "Shutdown (unload)"
   14 = "Startup (load)"
   16 = "Pattern Download - scheduled"
   17 = "Too Many Viruses (in set period)"
   18 = "FWD To QServer (q files)"
   20 = "Backup failed to load from Q"
   21 = "Scan Abort (before completed)"
   22 = "RTS Load Failure"
   23 = "RTS Load Success"
   24 = "RTS Unload Success"
   25 = "Remove Client (30 day silence)"
   26 = "Scan Delayed (snooze)"
   27 = "Scan Restart (after snooze)"
   28 = "Add SAV roam client to server"
   29 = "Remove SAV roam client from server"

  } # event
  
  logger = {
  	
  	0 = "Scheduled"
    1 = "Manual"
    2 = "Realtime"
    6 = "Console"
    7 = "VPDOWN"
    8 = "System"
    9 = "Startup"
    101 = "Client - the event was received from a client"
    102 = "Forwarded - the event was received (forwarded) from another server"
    65637 = "Manual"
    131173 = "Realtime"
    524389 = "System"
    393317 = "Console"
    720997 = "Defwatch"
    6619237 = "Client"

  } # logger

  quarantine_status = {
  	
  	0 = "None"
    1 = "Failed"
    2 = "OK"
  	
  } # quarantine_status

  category = {

  1 = "Infection"
  2 = "Summary"
  3 = "Pattern"
  4 = "Security"

  } # category

  action_taken = {

   0 = "Unknown Action"
   1 = "Quarantined"
   2 = "Renamed"
   3 = "Deleted"
   4 = "Left alone"
   5 = "Cleaned"
   6 = "Cleaned or Macros Deleted"

  } # action_taken

  primary_action = {

   0 = "Unknown Action"
   1 = "Quarantine infected file"
   2 = "Rename infected file"
   3 = "Delete infected file"
   4 = "Leave alone (log only)"
   5 = "Clean virus from file"
   6 = "Clean or delete macros"

  } # primary_action

  secondary_action = {

   0 = "Unknown Action"
   1 = "Quarantine infected file"
   2 = "Rename infected file"
   3 = "Delete infected file"
   4 = "Leave alone (log only)"
   5 = "Clean virus from file"
   6 = "Clean or delete macros"

  } # secondary_action

  still_infected = {

  	0 = "No"
  	1 = "Yes"

  } # still_infected

  cleanable = {

    0 = "Cleanable"
    1 = "No Clean Pattern"
    2 = "Not Cleanable"

  } # cleanable

  deletable = {

    4 = "Deletable"
    5 = "Not Deletable"

  } # deletable
 } # symantec_anti_virus_corporate_edition
} # symantec