With Symantec Management Platform (SMP) 7.1 the SMP logs and EventQueues have been moved to the “C:\ProgramData\Symantec\SMP” directory.
Using a Registry Key tweak I strongly advise you to redirect Logs & EventQueues on another drive for obvious reasons…
Article URL http://www.symantec.com/docs/TECH161370
But as a Best Practice,
It is advised that you should not redirect the EventQueues to the NSCap directory as this will result in NSE’s not being processed, and it also causes issues affecting tasks such as Inventory and Active Directory Import.
Article URL http://www.symantec.com/docs/TECH183959