Hello!

Sentinel 7.1 and MS Exchange 2011.1r1 collector with File Collector
2011.1r1
First scenario the collection is from cifs share and the Trust event
Source Time is not checked (not set) with saved offset (end of file).
The connector read the first file, which has 2014.08.01 modification
time.
Second scenario the collection is from cifs share and the Trust event
Source Time is checked (set true) with saved offset (end of file). The
connector read the last file, which has the 2014.09.25 modification
time.
In both case the share contains 124 file and 1 folder, file pattern is
the same, rotation is yes.
Third scenario the collection is from cifs share and the Trust event
Source Time is not checked (not set) with saved offset (end of file).
The connector read the first file, which has the earliest modification
time. I set the filename in order to read the 2014.09.25 file. It is
good until it finished with the file, then it reads the 2014.08.01
file.

Is the 1st or 2nd scenario a bug or this is how it works? The
modification time are different for all the files.

Thank you for your answer!


--
woodspeed
------------------------------------------------------------------------
woodspeed's Profile: https://forums.netiq.com/member.php?userid=7232
View this thread: https://forums.netiq.com/showthread.php?t=51837