How is FSTYPE determined on the windows agent? In particular is it possible to differentiate between local file systems and those being mounted from another machine?
I have a system with a local disk, and also a network drive from our file server.
When I look up the vfs.fs.discovery, both filesystems come up as type NTFS. Since I am also monitoring the fileserver directly, that means I end up getting multiple alerts for the same filesystem. One from the server, and one from each client that has the drive attached.
It would be nice if it could differentiate. A type of CIFS would make more sense. This may be a windows limitation, but its a big one and a workaround would be great.
I have a system with a local disk, and also a network drive from our file server.
When I look up the vfs.fs.discovery, both filesystems come up as type NTFS. Since I am also monitoring the fileserver directly, that means I end up getting multiple alerts for the same filesystem. One from the server, and one from each client that has the drive attached.
It would be nice if it could differentiate. A type of CIFS would make more sense. This may be a windows limitation, but its a big one and a workaround would be great.