04-03-2020 12:16 PM
I am seeing files which appear identical to the Audit files with the events table but are labled as wb_audit_cifs_MSU_ID_<timestamp>_0.sqlite in the inbox that do not ever get called by the indexer commands leaving them to build up.
Does anyone know what function or process this designates or how to get it to be indexed?
Thank you
05-15-2020 08:10 AM
Anyone?
Is this community moderated by Veritas?
05-15-2020 08:51 AM
Hi Pix_R!
Those files are generated by the Real-Time Whitelist and Blacklist Policies funtionality and should be consumed by the RTWBJob.
Additional details can be found in the following Technote for the Jobs Available in Data Insight:
https://www.veritas.com/support/en_US/article.100045147
If they are not being consumed properly, I would recommend opening a case with Technical Support so we can find the issue and resolve.
05-15-2020 09:00 AM
Thank you CraigeH,
I do not have RT policies enabled but do have wb_audit_cifs* files that failed to index. I have mentioned to support previously but now I can check some log data to see if there is a next steap. Appreciate it.
Pix
05-18-2020 09:33 AM
I have been sidetracked with other issues at the moment and stymied by:
2020-05-18 08:35:07 INFO: #{168} [RTWBJob.processWBAuditFiles] No policies configured
I will get back around to it once I find more time.
Pix