Clients status (offline/disable) in external logging

Can somebody tell me what file shows SEP client offline or disabled status?

They are all stored in:

Program Files\Symantec\Symantec Endpoint Protection Manager\data\dump

What is the message string in text file?

Thanks.