How to Investigate Compression Services Errors

Overview

In the Netwrix Auditor health log, some error events mention issues with the compression service or its connectivity, such as Compression service is unavailable and Unable to update the Compression Service. This article describes how to troubleshoot these errors.

Description

1. If you recently migrated Netwrix Auditor to a new server, check that the old Netwrix instance doesn't have access to your environment. Navigate to the old Netwrix server and stop all Netwrix Auditor services.

2. Log in to the Netwrix server with Data Collection Account credentials (monitoring plan – settings – data collection) and check that you can open this path via File Explorer:

   • \*audited_server*\c$\Windows\

   Check if you can add or remove files from this folder. If not, check the permissions for the Data Collection account: Data Collecting Account

   Note: Pay attention to which collector you're going to adjust permissions.

3. Test the ports required for the problematic monitoring plan:

   • Protocols and Ports
   • Check TCP and UDP Ports Required

4. Check Remote Registry and Windows Management Instrumentation Services:

   • Enable Remote Registry and Windows Management Instrumentation Services for Windows Server
   • Enable Remote Registry Services for File Server

5. Add antivirus exclusions on the Netwrix and target servers for folders:

   • Antivirus Exclusions for Netwrix Auditor