I am trying to create a custom DQL report with the details below but I need to search our file servers over a specific date range and can't work out how to specify this. can anyone assist? FROM path Get name, basename, absname, created_on, active_...
Symantec Data Insight 5.0 product guides (PDF and HTML pages) are now available on the SORT documentation page.The Symantec Data Insight 5.0 documentation set includes the following manuals:Symantec Data Insight Release NotesSymantec Data Insight Sel...
Hi, I have a report which searches a list of paths for certain types of files such as vmdk, for example. FROM dfspath GET absname IF extension = 'vmdk' AND (substri(dfspath.absname, '<search path1>')=1 OR substri(dfspath.absname, '<search path...
I have a potential client who is asking about the User Activity Deviation functionality of Data Insight. They want to know if it can trigger alerts based on number of access attempts or denies? I know it can trigger based on access or read attemp...
I have no idea how to write a DQL report. Does anyone know if there is a spot to go to to get reports that others have written? If not how would I pull a report like this I need to sort and calculate by inferred ownership. We would like to see...
Hi All, I am trying to run a duplicate file report but I keep getting a failure: Output failure. Any idea on how to resolve the problem? Thanks
I have a Data Insight customer who is in the process of deploying PGP to provide secure encrypted folders for their file-shares. Is this supported, and does it require any changes to the collectors to enables Data Insight to scan these folders? Kind...
I am attempting to create a Sensitive files with violated policies report from the template. I have uploaded a .csv with the policies named, however when the report run and I look at the output, no policy is listed. I have included the script, any su...
I am running some sample DQL reports from the templates provided. I am having success with some however, some are failing on different indexers. Anyone else have a problem with failures?
Hello. I have a server OS Win Srv 2012r2 with Data Insight Version 4.5.0.4800. Connected with an agent Filer OS Win Srv 2012r2 with Shared Folder. The account from which the scans are the most rights to the maximum level of the file system and shar...
Trying to generate a report that only shows files older than 2 years or 5 years. Dont want to see/gen a report for what is 3 months old, etc. Only files over a specified age.
We have a number of filers we monitor, and every so often someone will decide to dump a HUGE amount of data on them. Space runs out, and then we get to track down where the culprit is. My question, is- has anyone found a decent solution for this...
Hello Guyz. i need your support to add file server in Data insight.I am facing trouble when i add file server credentials.can you provide me snap shots.
Hello. Any one who can guide me what credentiials of file server should i put in Data Insight server.I am facing problem when i put file server credentials.i am attaching snap shot.it would be better easy for understand.
How does one determine where an audit file that is stuck in the err folder? The name has the format audit_cifs_... Is there away to use that 5 digit number that follows the cifs_ to know which filer it originated?
My client has an indexer that has over 30GB in backlog audit files located in the inbox. I have done some digging and found the commd0.0err log, this shows numerous errors. These errors range from "files could not be consumed in batch mode", to "repo...
I am looking at one of the indexers deployed within my client's environment and in "C:\Program Files\Symantec" the file is empty. This indexer is running slow and has over a 30GB backlog in the inbox. Are these related? What is the best way to fix th...
My client has a large environment. What is the best way to set up a DQL report to only run a report on a single indexer, collector or filer?
I am trying to create a DQL report. I am receiving an error message, it states: Parse error: syntax error, unexpected ID, expecting END. The rule I have mashed together looks like this: FROM activity GET user.name user.domain ...
