Enabling File Activity in the investigation dashboard

Before you begin

  • The FAM bundle must be installed and configured.
  • The Investigation Dashboard must be enabled.

About this task

Note: The FAM queries the server for the server IP addresses and takes the first one it finds. There is no way to select "the appropriate" IP address from a host name when the host has multiple IP addresses. Specify the IP address explicitly if you want to see that IP address in the reports.

Procedure

  1. On the collector, at the CLI prompt, run the GuardAPI command: 
    grdapi enable_fam_crawler [extraction_start] [schedule_start] [activity_schedule_interval] [activity_schedule_units] [entitlement_schedule_interval] [entitlement_schedule_units]
    Example: The following command sends updated discovery and classification results to enterprise search for classification data every 2 minutes and for entitlement information every day. 
    grdapi enable_fam_crawler activity_schedule_interval=2 activity_schedule_units=MINUTE entitlement_schedule_interval=1 entitlement_schedule_units=DAY
    By default, the extraction starts when you enter the command, extracting data from the moment (time) you entered the command.
  2. Repeat on each collector.