No data for monitored folder
Monitoring \\fileserver\i$ and events are being listed in Real Time view.
Added \\fileserver\f$ and accepted "Let FileAudit automatically..." but no events show up in File access viewer. Hit refresh and get warning "The NTFS audit needs to be configured". Click Next, Next, Finish and get message "Configuration of the NTFS audit started". Events aren't appearing so I click refresh again and go through this cycle a few times.
Went back into Audit Configuration and \\fileserver\f$ shows "Not configured" under NTFS audit. I click "Remove" but it doesn't get removed unless I back out and try again several times. Also, it really #?!4ç* that the every time I click something on this page the selection jumps back to the first option.
I added \\fileserver\j$ and though the program tells me that the auditing is not configured I do get events on this drive. Huh?
Jean-Noël HAAS commented
For Anonymous. Did you wait that the folder is completely configured? Does it show as Configured or Configuring in the audit configuration? If there is a lot of sub folders and files in it, it may take a while until it is configured.
If needed, you can hit the F12 key in the FileAudit console to run the diagnostic tool. At the end of the process you can pick up the files Diagnostics.txt and ServiceLog.txt in the displayed folder and send us a zipped copy at firstname.lastname@example.org. We will give you indications accordingly.
I am having the same issue "No access event has been detected" when I have auditing enabled on a folder.
AdminIS Decisions (Team, IS Decisions) commented
Thanks for your interest in FileAudit.
Our technical support team will assist you. Could you please open the FileAudit console
and hit the F12 key. It will launch our diagnostic tool allowing to get all FileAudit configuration
settings and logs.
When finished, a folder will be open with all files required to investigate. Please zip and send them to email@example.com.