Macbrun
45
We just upgraded to FileSight 9.4 and two of the five monitors began giving this error: "A test file named C:SharesPeopleSoftFILESIGHT_AUDIT_TEST_FILE is periodically written to disk to ensure PA File Sight sees the activity coming through as an audit of the application's functionality. Activity for the test file has not been seen, so the monitoring may not be functioning properly."
Nothing was changed in the settings. The satellites were updated as well. Any ideas?
Hi Macbrun,
That test was put in place because sometimes people create a monitor to watch a drive that PA File Sight can't watch (a remote drive for example). If you are seeing the activity you expect then you can disable that probe by setting:
HKLMsoftwarePAFileSight
FileSight_DoAuditTestFileIO = 0
You don't need to restart anything after making that change.
Thanks
Quinn
Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.
Great, thanks!
