File activity appears in reports but not the investigation dashboard

Symptoms

You see file activity in the predefined reports, but not in the investigation dashboard.

Resolving the problem

Verify the configuration using the guard API:
  • To send crawled data to quick search: grdapi enable_fam_crawler activity_schedule_interval=2 activity_schedule_units=MINUTE entitlement_schedule_interval=10 entitlement_schedule_units=MINUTE
  • To enable quick search (with option to also include violations): grdapi enable_quick_search includeViolations=true schedule_interval=2 schedule_units=MINUTE