Veritas Data Insight User's Guide

Last Published:
Product(s): Data Insight (6.2)
Platform: Windows
  1. Section I. Introduction
    1. Introducing Veritas Data Insight
      1.  
        About Veritas Data Insight
      2.  
        About data custodian
      3.  
        About permissions
      4.  
        About SharePoint permissions
      5.  
        About Box permissions
      6.  
        About audit logs
      7.  
        About migrated domains
      8.  
        Applications for Symantec Data Loss Prevention
      9.  
        Content classification using Veritas Information Classifier
    2. Using the Veritas Data Insight Management Console
      1. About the Veritas Data Insight Management Console
        1.  
          Header
        2.  
          Tabs
        3.  
          Navigation pane
        4.  
          Content pane
      2.  
        Operation icons on the Management Console
      3.  
        Logging in to the Data Insight Management Console
      4.  
        Logging out of the Data Insight Management Console
      5.  
        Accessing online Help
  2. Section II. Data Insight Workspace
    1. Navigating the Workspace tab
      1.  
        About the Data Insight Workspace
      2.  
        Using the Workspace filters
      3.  
        Managing the Workspace
      4.  
        Searching the storage device hierarchy
      5.  
        Searching for users and user groups
    2. Analyzing data using the Workspace views
      1.  
        About information risk
      2.  
        Viewing summary of data sources
      3. Viewing shares summary
        1.  
          About control points
      4.  
        About the risk score for users
      5. About the Risk Dossier
        1.  
          Assessing risky users - an example scenario
      6.  
        Viewing user summary
      7.  
        Viewing details of Watchlist users
      8.  
        Viewing details of alert notifications
    3. Viewing access information for files and folders
      1.  
        About viewing file or folder summary
      2.  
        Viewing the overview of a data source
      3.  
        Managing data custodian for paths
      4. Viewing user activity on files or folders
        1.  
          Assigning an inferred data owner as custodian
        2.  
          Assigning an active user as custodian
        3.  
          Assigning a custodian from the Permissions tab
      5.  
        Viewing file and folder activity
      6.  
        Viewing CIFS permissions on folders
      7.  
        Viewing NFS permissions on folders
      8.  
        Viewing SharePoint permissions for folders
      9.  
        Viewing OneDrive permissions for folders
      10.  
        Viewing Box permissions on folders
      11.  
        Viewing audit logs for files and folders
      12. About visualizing collaboration on a share
        1.  
          Analyzing activity on collaborative shares
    4. Viewing access information for users and user groups
      1.  
        Viewing the overview of a user
      2.  
        Viewing the overview of a group
      3.  
        Managing custodian assignments for users
      4.  
        Viewing folder activity by users
      5.  
        Viewing CIFS permissions for users
      6.  
        Viewing CIFS permissions for user groups
      7.  
        Viewing NFS permissions for users and user groups
      8.  
        Viewing SharePoint permissions for users and user groups
      9.  
        Viewing Box permissions for users and user groups
      10.  
        Viewing audit logs for users
  3. Section III. Data Insight reports
    1. Using Data Insight reports
      1.  
        About Data Insight reports
      2.  
        How Data Insight reporting works
      3.  
        Creating a report
      4. About Data Insight security reports
        1.  
          Activity Details report
        2. Permissions reports
          1.  
            Inactive Users
          2.  
            Path Permissions
          3. Permissions Search report
            1.  
              Create Permissions Search report
          4.  
            About Permissions Query templates
          5. Creating a Permissions Query Template
            1.  
              Using the match-type criteria
          6.  
            Creating custom rules
          7. Permissions Query Template actions
            1.  
              Editing or deleting a Permissions Query Template
            2.  
              Copying a Permissions Query Template
            3.  
              About sharing a Permissions Query Template
          8.  
            Using Permissions Search report output to remediate permissions
          9.  
            Entitlement Review
          10.  
            User/Group Permissions
          11.  
            Group Change Impact Analysis
        3. Ownership Reports
          1.  
            Data Custodian Summary
          2.  
            Inferred Owner
          3.  
            Data Inventory Report
      5.  
        Create/Edit security report options
      6.  
        Data Insight limitations for Box permissions
      7. About Data Insight storage reports
        1.  
          Activity Summary reports
        2. Capacity reports
          1.  
            Filer Utilization
          2.  
            Filer Growth Trend
        3. Data Lifecycle reports
          1.  
            Inactive Data by File Group
          2.  
            Inactive Data by Owner
          3.  
            Data Aging
          4.  
            Inactive Folders
        4. Consumption Reports
          1.  
            Potential Duplicate Files
          2.  
            Consumption by Folders
          3.  
            Consumption by Department
          4.  
            Consumption by File Group
          5.  
            Consumption by Owner
          6.  
            Consumption by File Group and Owner
      8.  
        Create/Edit storage report options
      9. About Data Insight custom reports
        1.  
          About DQL query templates
        2.  
          Creating custom templates for DQL queries
        3.  
          Create/Edit DQL report options
        4. Creating DQL reports with custom variables
          1.  
            Running a DQL report with custom variables
      10.  
        Considerations for importing paths using a CSV file
    2. Managing reports
      1.  
        About managing Data Insight reports
      2. Viewing reports
        1.  
          About stale information in reports
      3.  
        Filtering a report
      4.  
        Editing a report
      5.  
        About sharing reports
      6.  
        Copying a report
      7.  
        Running a report
      8.  
        Viewing the progress of a report
      9.  
        Customizing a report output
      10.  
        Configuring a report to generate a truncated output
      11.  
        Sending a report by email
      12.  
        Automatically archiving reports
      13.  
        Canceling a report run
      14.  
        Deleting a report
      15.  
        Considerations for viewing reports
      16.  
        Organizing reports using labels
  4. Section IV. Remediation
    1. Configuring remediation workflows
      1.  
        About remediation workflows
      2.  
        Prerequisites for configuring remediation workflows
      3.  
        Configuring Self-Service Portal settings
      4.  
        About workflow templates
      5. Managing workflow templates
        1.  
          Create/Edit Entitlement Review workflow template
        2.  
          Create/Edit DLP Incident Remediation workflow template
        3.  
          Create/Edit Ownership Confirmation workflow template
        4.  
          Create/Edit Records Classification workflow template
      6. Creating a workflow using a template
        1. Create Entitlement Review workflow options
          1.  
            Customizing Entitlement Review report output
        2. Create DLP Incident Remediation workflow options
          1.  
            Marking the paths as mandatory for DLP Incident Remediation
        3.  
          Create Ownership Confirmation workflow options
        4.  
          Create Records Classification workflow options
      7. Managing workflows
        1.  
          Viewing details of submitted workflows
        2.  
          Extending the deadline of a workflow
        3.  
          Copying a workflow
        4.  
          Managing submitted workflows
        5.  
          Canceling or deleting a workflow
      8.  
        Auditing workflow paths
      9.  
        Monitoring the progress of a workflow
      10.  
        Remediating workflow paths
    2. Using the Self-Service Portal
      1. About the Self-Service Portal
        1.  
          About Entitlement Review
      2.  
        Logging in to the Self-Service Portal
      3.  
        Using the Self-Service Portal to review user entitlements
      4.  
        Using the Self-Service Portal to manage Data Loss Prevention (DLP) incidents
      5.  
        Using the Self-Service Portal to confirm ownership of resources
      6.  
        Using the Self-Service Portal to classify sensitive data
    3. Managing data
      1. About managing data using Enterprise Vault and custom scripts
        1.  
          About Retention categories
        2.  
          About post-processing actions
      2.  
        Managing data from the Shares list view
      3.  
        Managing inactive data from the Folder Activity tab
      4.  
        Managing inactive data by using a report
      5.  
        Archiving workflow paths using Enterprise Vault
      6.  
        Using custom scripts to manage data
      7.  
        Pushing classification tags while archiving files into Enterprise Vault
      8. About adding tags to files, folders, and shares
        1.  
          Using the metadata framework for classification and remediation
    4. Managing permissions
      1.  
        About permission visibility
      2.  
        About recommending permission changes
      3. About recommending permissions changes for inactive users
        1.  
          Reviewing permission recommendations
        2.  
          Analyzing permission recommendations and applying changes
      4.  
        Making permission changes directly from Workspace
      5.  
        Removing permissions for Entitlement Review workflow paths
  5. Appendix A. Command Line Reference
    1.  
      mxcustodian
  6.  
    Index

Pushing classification tags while archiving files into Enterprise Vault

You can add classification tags to a file that you want to archive using Enterprise Vault. When the file is archived and indexed in Enterprise Vault, the classification tag is included in the index of the file. When you search the archive, the search is carried out on the tags that are attached to the file rather than the entire Enterprise Vault database. You can also use the classification tags to reassign retention categories that determine how long archived items are stored in Enterprise Vault. You can add any number of classification tags.

A user with the Server Administrator or a Report Administrator role can add classification tags to files being archived.

To push classification tags

  1. Click the Reports tab and select the report type that allows data remediation using Enterprise Vault, for example Inactive Data by File Group or DQL report.
  2. Click Create Report.
  3. On the Create Report wizard, enter the report input parameters and navigate to the Remediation tab.
  4. Select the Take action on data generated by report check box.
  5. Select the Archiving (Enterprise Vault) radio button.
  6. Select the Add Custom Index Property check box.
  7. Select a value from the Property type drop-down box. The different property types include Text, Integer, Date, and Classification property.

    Note:

    Classification property is only available for DQL reports.

  8. Depending on what you select, three text boxes corresponding to Set, Name and Value appear. Enter the tag in the following format:

Field

Description

Set

Name of the property-set to which the property is added.

Note:

This name can be an already existing property set name or a new one. If it does not already exist, a new property set is created when you make an entry here.

Name

Name of the property. A property set can have a number of unique names.

Value

Value of Set.Name. The value can be Text, Integer, or Date type depending on the property type selected.

Note:

This field is not available when the Property type is set to Classification property because Data Insight applies the classification tags fetched from Veritas Information Classifier as the value of the property type.

Figure: An example of Set, Name, and Value

An example of Set, Name, and Value

Note:

If classification tags are selected, all classification tags applicable to the file being archived are added to the archive request. The tags are in a semi-colon separated list.

You can review the classification tags applied to the files archived in Enterprise Vault from:

  • On the Data Insight Management Console, navigate to Setting > Action Status page.

  • On the Enterprise Vault Console.

You can track and manage the progress of the operations that are initiated from the Data Insight Management Console. You can perform the following tasks from the Action Status page.

  • View the progress of an operation

  • Cancel an ongoing operation

  • Re-run a completed or canceled operation

  • Delete a completed or canceled operation

Note:

The Cancel and Re-run options are not supported for Delete Files action.

You can view the progress of the following types of operations.

  • Archive operations using Enterprise Vault

  • Permission remediation operations

  • Remediation operation using custom actions

  • Deletion of stale, inactive, or orphan files and folders

The Action Status page displays the following information:

  • The unique identification number of the operation

  • The system-generated name for the triggered operation indicating its origin

  • The type of the operation. For Enterprise Vault operations, the type is specified as EV. For permission remediation operations, the type is PR. For custom action operations, the type is CUSTOM. For delete action operations, the type is DELETE FILES

  • The time when the user triggered the operation from the Management Console

  • The user who triggered the operation

  • The time when the destination server starts processing the triggered request. The destination server is an external server which is responsible for the actual execution of an operation that is triggered from the Data Insight Management Console.

    For example, in the case of an archive operation, the destination server is the Enterprise Vault server.

  • The time when the destination server completes processing the request

  • The time it takes to complete the operation

  • The status of the operation

  • In case of archive operation using Enterprise Vault, the custom index property, including the classification tags applied to the files that are being archived

Note:

Only some columns are displayed in the default view. You can view the other columns by selecting them from the column header drop-down.

The Details for Action panel shows you the step-by-step break-down of the selected operation.

To view the status of an operation

  1. In the Management Console navigate to Settings > Action Status. The Action Status page displays the details of recently triggered operations

  2. Use the check box filter to display the operations based on their Type or Status. Additionally, you can use the search facility to display the operations based on their attributes such as Origin, Type, or Status

  3. Click the Origin of the selected operation to view granular details of an operation. Alternatively, click the Select Action drop-down, and select View.

  4. The details of the selected operation are displayed in the Details for Actionpanel.

  5. Use the check box filter to display the operations based on the attributes such as: Status or Filer. Additionally, you can use the search facility to display the details based on attributes such as Path or Status.

You can cancel an operation that is in progress. Cancelling an operation, pauses all the activities of the operation. You can re-run a canceled operation later.

To cancel an ongoing operation

  1. In the Management Console, navigate to Settings > Action Status. The Action Status page displays the details of recently triggered operations

  2. Use the check box filter to display the operations based on their Type or Status. Additionally, you can use the dynamic filter to display the operations based on their attributes such as Origin , Type, or Status

  3. Click Select Action for the operation you want to cancel.

  4. Click Cancel.

You can re-run a canceled or a completed operation.

To re-run a canceled or a completed operation

  1. In the Management Console navigate to Setting > Action Status. The Action Status page displays the details of recently triggered operations.

  2. Use the check box filter to display the operations based on their Type or Status

  3. Click Select Action for the operation you want to re-run.

  4. Select Run Again.

  5. Select any of the following:

    • All - To run all the sub-steps for the operation

    • Unsuccessful - To run all the failed sub-steps for the operation

    Note:

    For a permission remediation or custom action-related operation that is canceled, the option to run the unsuccessful steps again is not available.

You can delete an operation that is canceled or completed.

To delete a canceled or a completed operation

  1. In the Management Console navigate to Setting > Action Status. The Action Status page displays the details of recently triggered operations.

  2. Use the check box filter to display the operations based on their Type or Status.

  3. Click Select Action for the operation you want to delete.

  4. Select Delete.