Is it possible to prevent SWS from detecting “activity rate change” warning when searching for all files including their contents?
Applies to
- Cloud Insights
- Storage Workload Security (SWS)
Answer
No.
- SWS receives information about requests for files from storage, but the information is processed as a request from the storage perspective, such as read/create/delete.
- Since the request does not contain information that identifies what kind of operation the request corresponds to from what application on the client, it cannot be excluded.
- If a large number of files are read in a full-text search, it is expected to be very different from normal user activity, in which case it will be detected as abnoraml change in activity rate.
Additional Information
additionalInformation_text
