Error: Drive Letter Resolver is not Installed on the Target Host
Symptom
Netwrix Auditor returns the following error for Windows File Servers:
Drive letter resolver is not installed on the target host
Cause
The component responsible for collecting information about the drive letter was not installed on the target file server. It is Network Traffic Compression Service that collects this information to map data in the security events.
Resolution
To solve the issue, deploy Network Traffic Compression Service on the audited file server:
- In the Netwrix Auditor client, select the corresponding Monitoring Plan.
- In the Data source section on the right, select Edit data source.
- In the dialog displayed, locate the Specify data collection method section and select the Enable network traffic compression check box.
- Network Traffic Compression Service will be automatically deployed and launched on the target file server during the next data collection (scheduled or ad hoc), collecting and pre-filtering data.
- Click Save & Close.
Consider that using this service will also minimize network load and speed up state-in-time snapshot collection and SACL configuration. See also:
- Monitored Object Types, Actions, and Attributes: File Servers ⸱ v10.5: https://docs.netwrix.com/docs/auditor/10_8
- Monitored Object Types, Actions, and Attributes: File Servers ⸱ v10.6: https://docs.netwrix.com/docs/auditor/10_8