File transfer events are not showing up in the Search
When reviewing session logs, file transfer activity is not showing up in the Search.
If the Clipboard channel is enabled, it implicitly enables copying files as well, as the user can simply copy-paste the file. Copy-pasted files will not be visible in the logs or the File operations column of the Search page. To ensure that SPS records file transfer events, you must disable the Clipboard channel.
To make the list of file operations available in the File operations column of the Search page, navigate to the Channel Policies page of the protocol, and enable the Log file transfers to database option. This option is disabled by default.
To send the file operations into the system log, enable the Log file transfers to syslog option. This option is disabled by default.
NOTE: Turning logging on might result in a slight performance penalty. If traffic load slows processes down, disable the option.