We just upgraded to FileSight 9.4 and two of the five monitors began giving this error: "A test file named C:SharesPeopleSoftFILESIGHT_AUDIT_TEST_FILE is periodically written to disk to ensure PA File Sight sees the activity coming through as an audit of the application's functionality. Activity for the test file has not been seen, so the monitoring may not be functioning properly."

Nothing was changed in the settings. The satellites were updated as well. Any ideas?

asked 29 Mar, 09:46

Macbrun's gravatar image

Macbrun
3
accept rate: 0%


Hi Macbrun,

That test was put in place because sometimes people create a monitor to watch a drive that PA File Sight can't watch (a remote drive for example). If you are seeing the activity you expect then you can disable that probe by setting:

HKLMsoftwarePAFileSight

FileSight_DoAuditTestFileIO = 0

You don't need to restart anything after making that change.

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

link

answered 01 Apr, 09:44

Quinn's gravatar image

Quinn ♦♦
14.5k3925
accept rate: 35%

edited 01 Apr, 09:44

Great, thanks!

(01 Apr, 11:33) Macbrun
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×33
×5
×2

Asked: 29 Mar, 09:46

Seen: 554 times

Last updated: 01 Apr, 11:33