Configuration

NetworkSessionMonitor

You can configure any number of <FilterRules> to describe which network sessions should be considered as usage.

<SystemMonitor>

  <NetworkSessionMonitor watchPassive="true">

    <FilterRule ... />
    <FilterRule ... />

  </NetworkSessionMonitor>

</SystemMonitor>

watchPassive

default:: true

This option determines, if sessions with no open files or folders should also be considered as usage.

FilterRule

<FilterRule type="MustNot"
  userName="test"
  clientName="DESKTOP-123456"
  clientIP="192.168.178.20"

  shareName="music"
  filePath="albums/xyz"
/>

type

default:: MustNot

This attribute determines if this is an inclusive or exclusive filter rule.

Must: Inclusive filters reduce the set of monitored resources to include only those that match at least one of the filters.
MustNot: Exclusive filters reduce the set of monitored resources by those that match with them.

userName

The Windows account name of the connected user. Matched case-insensitively.

clientName

The NetBIOS or DNS host name of the connecting client machine. Matched case-insensitively.

clientIP

The IP address of the connecting client. Must be an exact address — CIDR ranges are not supported.

shareName

The name of the SMB share being accessed. Matched case-insensitively. This criterion is only evaluated for sessions that have open files; it has no effect on passive sessions.

filePath

🔍 regex:

A regular expression matched against the absolute path of each open file within the session, relative to the filesystem root. This criterion is only evaluated for sessions that have open files; it has no effect on passive sessions.