NetBackup IT Analytics System Administrator Guide
- Introduction
- Preparing for updates
- Backing up and restoring data
- Monitoring NetBackup IT Analytics
- Accessing NetBackup IT Analytics reports with the REST API
- Defining NetBackup estimated tape capacity
- Automating host group management
- Categorize host operating systems by platform and version
- Bulk load utilities
- Automate NetBackup utilities
- Scheduling utilities to run automatically
- Attribute management
- Importing generic backup data
- Backup job overrides
- Managing host data collection
- System configuration in the Portal
- Custom parameters
- Performance profile schedule customization
- LDAP and SSO authentication for Portal access
- Change Oracle database user passwords
- Integrate with CyberArk
- Tuning NetBackup IT Analytics
- Working with log files
- Portal and data collector log files - reduce logging
- Data collector log file naming conventions
- Portal log files
- Defining report metrics
- SNMP trap alerting
- SSL certificate configuration
- Configure virtual hosts for portal and / or data collection SSL
- Keystore on the portal server
- Portal properties: Format and portal customizations
- Data retention periods for SDK database objects
- Data aggregation
- Troubleshooting
- Appendix A. Kerberos based proxy user's authentication in Oracle
- Appendix B. Configure TLS-enabled Oracle database on NetBackup IT Analytics Portal and data receiver
- Appendix C. NetBackup IT Analytics for NetBackup on Kubernetes and appliances
Events captured for audit
Event audit logging is always enabled by default in NetBackup IT Analytics and can be edited by an admin user from Admin > Advanced > System Configuration > Portal tab. When enabled, the events captured can be viewed on the Audit Events Summary and Audit Event Details reports. You can trace the user actions and object value changes using this feature.
Events that fit the following criteria are captured:
Only selected audit events (or user actions) are audited.
For template events (create/modify/delete) attribute changes are not captured.
Attribute changes (such as create/modify/delete) must not be for template events
Attribute changes (such as create/modify/delete) must not belong to Veritas Backup Exec policy.
Event audit logging captures the following events:
Table: Events captured
Event group | Event | Event description |
---|---|---|
User Management | Add user | A new user is added. |
Delete user | An existing user is deleted. | |
Modify user details | Existing user details are modified. | |
User Group Management | Add user | A user is added to a user group. |
Remove user | A user is removed from a user group. | |
Security | User login succeeded | A successful user login. |
User login failed | User login has failed. | |
User logged out | User has successfully logged out. | |
User switched ID | User has successfully switched the ID. | |
Unauthorized action | User has performed an unauthorized action. | |
API key created | API key generated successfully. | |
User Actions | Collector added | User has added a collector. |
Collector details modified | User has modified collector details, such as host name, servers, and password. | |
Collector key file generated | Collector key file was successfully generated. | |
Collector deleted | User has deleted a collector. | |
Policy added | User has added a policy. | |
Policy details modified | User has modified the policy details. | |
Policy deleted | User has deleted a policy. | |
Policy portability | User has moved a policy from one collector to other. | |
Report template created | User has created a report template. | |
Report template modified | User has modified a report template. | |
Report template deleted | User has deleted a report template. | |
Report instance created | User has created a report instance. | |
Report instance modified | User has modified a report instance. | |
Report instance deleted | User has deleted a report instance. |