Go Up
You are here: AdministrationAdditional ConfigurationExclude Objects from Monitoring ScopeFile Servers Monitoring Scope

Exclude Data from File Servers Monitoring Scope

You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Windows File Server, NetApp Filer and EMC Storage monitoring scope.

To exclude data from Windows File Server, NetApp Filer and EMC Storage monitoring scope

  1. Navigate to the %Netwrix Auditor installation folder%\File Server Auditing folder.
  2. Edit the *.txt files, based on the following guidelines:

    • Each entry must be a separate line.
    • Wildcards (*, ?) are supported. For example, you can use * for a class name to specify an attribute for all classes.
    • Lines that start with the # sign are treated as comments and are ignored.
    • A backslash (\) must be put in front of (*), (?) and (,) if they are a part of an entry value.
File Description Syntax

omitcollectlist.txt

Contains a list of objects to be excluded from being monitored.

monitoring plan name,server name, resource path

NOTE: Wildcards are not supported for the Server Name field. To disable filtering for this field, specify an empty string.

For example:

*,,\\\\*\\System Volume Information*

omiterrors.txt

Contains a list of errors and warnings to be omitted from logging to the Netwrix Auditor System Health event log.

monitoring plan name,server name,error text

For example:

*,productionserver1.corp.local, *Access is denied*

omitreportlist.txt

Contains a list of objects to be excluded from reports and Activity Summary emails. In this case audit data is still being collected.

monitoring plan name,action,who,object type,resource path,property name

NOTE: Wildcards are not supported for the action and property name fields. To disable filtering for these fields, specify an empty string.

For example:

*,,CORP\\jsmith,*,*,

omitstorelist.txt

Contains a list of objects to be excluded from being stored to the AuditArchive and showing up in reports. In this case audit data is still being collected.

monitoring plan name,action,who ,object type,resource path,property name

NOTE: Wildcards are not supported for the Change Type and Property Name fields. To disable filtering for these fields, specify an empty string.

For example:

*,,*,*,\\\\productionserver1.corp.local\\builds\\*, Attributes

omitstoreprocesslist.txt

Contains a list of processes to be excluded from being stored to the AuditArchive and showing up in reports.

monitoring plan name,resource path, executable path

NOTE: Only local applications can be excluded.

For example:

*,*,*notepad.exe

Go Up