This may be an easy questoin to answer, but I don't know where to start looking, other than logs. However, the logs are all blank in this case.
Here is the scenario: I log on to a workstation with SEP, Symantec pops up a notification in the lower-right by the system tray to inform me a threat has been discovered. Before I get my cursor to it to check and see what's going on, the notification goes away. Now there are no "lingering" notifications to check, so all I can do is open the SEP client and check the logs. I've checked Virus & Spyware, Proactive Threat, Network Threat, and Client Management logs, but none of them have any log content other than update notifications. Nothing to indicate any malware or other threat was detected.
Where did my notification go? This is on a Domain Controller and it's probably not a good thing that it found a threat!