Data Insight Reports Display Incorrect Create Time for Files from NFS Shares

Article: 100048170
Last Published: 2023-10-02
Ratings: 0 0
Product(s): Data Insight

Problem

The Create Time of files on NFS shares may display an incorrect timestamp in Data Insight reports.

Cause

Data Insight relies on the Microsoft NFS Client to connect to and scan NFS exports.

The MS NFS Client supports collecting atime (Accessed Time), mtime (Modified Time), and ctime (Change Time for Unix/NFS, Create Time for SMB/CIFS).

The MS NFS Client does not support btime (Birth Time).

The default reports in Data Insight display the Create Time using the ctime for CIFS only, for NFS shares without accompanying audit data, the Create Time is 0 (which can be displayed in the reports as Dec 31, 1969 or Jan 1, 1970)

As of Data Insight 6.4.1, the reports will now display Data Not Available for Create Time for NFS exports without audit data, as is done in the Workspace. 

Solution

If file system auditing is enabled for the NFS share and Data Insight is able to consume the audit data, Data Insight would receive the create audit event (btime) on the files and use that value for Create Time in the reports.

Was this content helpful?