Skip to main content

Rolling-Log Fix: "ItemStoragePipeline - Error Processing Item, Couldn't Collect FileHashSHA256 for File - Could Not Find File"

This article explains the ItemStoragePipeline - Error processing item, couldn't collect filehashsha256 error in the Netwrix Change Tracker agent Rolling Log and when it is safe to ignore.

Symptom​

The following error appears in the agent Rolling Log:

2017-10-11 08:11:18,385 [4] ERROR ItemStoragePipeline - Error processing item, couldn't collect filehashsha256 for file: /etc/rc6.d/K05dsmcad Error: Failed to collect data for attribute (Could not find file "/etc/rc6.d/K05dsmcad")

Cause​

This error occurs when a policy template in Netwrix Change Tracker is set to track a file and the agent cannot compute the SHA256 hash because the file is not found on the monitored device.

Resolution​

If the file does not exist on the device​

If you are receiving this error for a file that does not exist on the device, it is safe to ignore. If you are using one template to track multiple agents and some agents have the file while others do not, it is not a problem to let the template continue tracking this file.

NOTE: The only caution is the number of files the template is looking for. If the template grows significantly, having a large volume of these errors may cause performance issues. However, in most cases, it is perfectly fine.

If the file should exist​

If the file exists but the error still appears, verify the following:

  1. Verify the policy template is looking for the file in the correct location.
  2. If the file is stored in different locations on different servers, define all potential locations in the template.
  3. Check whether the file has special permissions that prevent the agent from reading it. If so, adjust the file permissions or the privileges of the account the agent uses.