Skip to main content

Cannot Copy Snapshot to Long-Term Archive − Access to Short-Term Archive Is Denied

Symptoms​

  • The following error is prompted in Health Log for one or multiple monitoring plans set up:
Event ID: 2002
Cannot copy the %name% snapshot to the Long-Term Archive
Access to the path %ShortTerm% is denied.

  • Statuses for items and data sources in affected monitoring plans state Working/Take Action and do not change.

  • No data is collected in the affected monitoring plans.

Cause​

Write permissions for the custom Long-Term Archive service account are misconfigured.

Resolution​

  1. Review the permissions settings for the affected Long-Term Archive service account. Refer to the following article for additional information: Installation − Configure Long-Term Archive Account ⸱ v10.5 https://docs.netwrix.com/docs/auditor/10_8/requirements/longtermarchive).

  2. Allow Full Control permissions to the affected Long-Term Archive service account for the following 2 folders:

    1. Long-term Archive — you can establish the location by following Settings > Long-Term Archive > Write audit data to. The default location is %PROGRAMDATA%\Netwrix Auditor\Data.

    2. Short-Term Archive — you can establish the location by following Health Status > Open diagnostic logs folder under Working folder > parent folder of the Logs folder. The default location is C:\ProgramData\Netwrix Auditor\ShortTerm.