Auditbeat file integrity doesn't scans shares nor mount points

Elastic Stack Beats
1

auditbeat file integrity doesn't scans shares nor mount points

I tried to mount windows share to a windows machine with a auditbeat on it mapped to Z:
The auditbeat does not recognizing changes there

moreover i tried mounting the same share to a linux machine and the beat doesn't recognizing changes as well
but when i restart the auditbeat on linux it detected the changes

any ideas about windows and linux ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.