Multiple events showing for every word and excel document opened and modified (docx, doc, xlxs, xls).
Create an exclusion for *.tmp files using the following method.
Change Auditor Client
View-> Administration
Agent -> Configuration
Select the configuration you have created with file auditing.
Select "edit template"
Select the "File system audit" tab
Select the template and click "edit template"
A path will be specified for auditing, when you select this you will see three tabs at the bottom:
"Events", "Inclusion", "Exclusion".
Select the "exclusion" tab and enter the file types you wish to exclude from the audit:
*.tmp
Enter the file extension and then press "Add", select "File". Once all the file extensions have been entered press "Finish", "Ok", "Ok".
This will then be applied to all the agents with that configuration showing.
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center