Netwrix Auditor: Snapshot saving process was interrupted

  • What version are you using? (OS, client, server, etc.) WS2022 Auditor 10.8 15840
  • For the scenario you’re describing, what settings/configuration do you currently have in place?
  • What error messages or unexpected behavior are you seeing? File Storage Audit Service Event 6104 The version of a snapshot security descriptor file is invalid. and Snapshot saving process was interrupted
  • What have you tried so far? Cannot find anything related to the reason why multiple plans started receiving this error

Hi Belton,
It may be worth looking at your antivirus/EDR/XDR host. This article suggests it may be interfering with File Storage Audit Service snapshot writes.