The product returns the following error: “Drive letter resolver is not installed on the target host“.
The component responsible for collecting information about the drive letter was not installed on the target file server.
It is Network Traffic Compression Service that collects this information – to map data in the security events.
To solve the issue, it is recommended to deploy Network Traffic Compression Service on the audited file server:
- In Netwrix Auditor client, select the corresponding Monitoring Plan.
- In the Data source section on the right, select Edit data source.
- In the dialog displayed, locate the Specify data collection method section and select the Enable network traffic compression check box.
- Network Traffic Compression Service will be automatically deployed and launched on the target file server during the next data collection (scheduled or ad hoc), collecting and pre-filtering data.
- Click Save & Close.
Consider that using this service will also minimize network load and speed up state-in-time snapshot collection and SACL configuration.