-
|
Hey, guys! I have a problem with offline collectors. The collection time can go over 3 or 4 hours. At the same time there is regularly a message about “ntfs cache update”. I tried changing this value in the artifact parameters Nothing changed. I have tried changing this value in ntfs_cache.go and ntfs.go files and building a new Velociraptor.exe. Same thing. Has anyone had the same problem? Is there any solution? Velociraptor version is 0.73.3. There are 38 artifacts in offline collector |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
The ntfs cache message is not an issue - it just says the cache was flushed. To see whats is happening you can start the debug server and provide some metrics for us https://docs.velociraptor.app/docs/deployment/troubleshooting/#debugging-the-offline-collector |
Beta Was this translation helpful? Give feedback.
-
|
Thank you. I found what the problem was. Debug mode helped with that |
Beta Was this translation helpful? Give feedback.
The ntfs cache message is not an issue - it just says the cache was flushed. To see whats is happening you can start the debug server and provide some metrics for us
https://docs.velociraptor.app/docs/deployment/troubleshooting/#debugging-the-offline-collector