000036099 - File compression error code 618 in RSA NetWitness Endpoint

Document created by RSA Customer Support Employee on Mar 6, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036099
Applies ToRSA Product Set: NetWitness Endpoint
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.4.0.4, 4.3.0.6
 
Issue
When a file that is NTFS compressed by the NTFS file system is requested by the UI it generates the below error message in the UI Agent Log history:


compression file error sample

Here is the full error message:
error code 618 - The specified compression format is unsupported.
CauseThe cause of this error code generated in the UI is because the Netwitness Endpoint agent lacks support for NTFS file decompression and will generate this error.
ResolutionCurrently, this is no way to work around this error without decompressing the file on the target machine and saving it in a format that is not NTFS compressed.

Attachments

    Outcomes