Auditor Health Log

We have a significant number of errors in the Netwrix Auditor Health Log. a large number of them are Event ID 1016 . In the description, it basically states the following:

The Registry data provider failed to get information on the registry key [Registry Path] due to the following error: The process cannot access the file because it is being used by another process.

The server and registry path indicated seem to vary significantly. Is there a common fix for this issue?

Steve,

Welcome to the Netwrix Community. The error that you are experiencing is a pretty common error when we run into certain anti virus software impacting what Netwrix Auditor is trying to do.

I would recommend reviewing this article: Antivirus Exclusions for Netwrix Auditor | Netwrix Product Documentation. It’s important to not only update the Auditor server but also the audited servers as well.

If you enter these exclusions and it does not solve the issue, please respond here and we can work on next steps.

Michael Purdin
Manager, Technical Support Engineering

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.