Windows File System auditing is not recording events and the following warning appears in the agent log file:
ITFA Plug-in filter config size 0X00090226 is over limit. Use the 'MaxConfigurationLength" override registry entry
Change Auditor Agent 6.5.150 and higher supports a configuration file of up to 512 KB
In some cases, the 512 KB size is not sufficient
The following registry key can be set on the Change Auditor agent to increase the maximum configuration file size that is supported
On the Change Auditor Agent machine:
The 0x100000 value equals 1MB configuration file which is twice the default.
Quest Software does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support.