Backup Exec 25 Administrator's Guide

To manage anomaly detection

1. Do any of the following:

   • In the System Heath group, under Anomaly Detection, click Manage Anomalies.

   • On the Job Monitor tab, click Anomaly Detection > Anomaly Information.

   On the Anomaly Detection window, the list of anomalies is displayed.

2. For an anomaly, you can do the following:

   Job Name	Displays name of the backup job.
   Resource Name	Displays name of the resource that is backed up. The resources can be backup sets or jobs (Microsoft 365).
   Detection Time	Date and time when the anomaly is detected.
   Severity	Displays the severity of the anomaly. The anomaly score is calculated based on the backup job parameters, attributes, or features. Based on score the severity of the anomaly is categorized. Score: 0-10 - Low Score: 10-15 - Medium Score: >15 - High
   Anomaly Status	Displays the status of the anomaly. False Positive Anomaly Confirmed
   Reason	Reason given for the False Positive anomaly status.
   Image Size	Displays size of the backup image and usual size range of the image.
   Backup Item Count	Displays number of items that are backed up and usual range of the number of items that are backed up.
   Deduplication Ratio	Displays ratio of the amount of data before deduplication to the amount of data after deduplication. Usual range of the deduplication ratio is also displayed.
   Backup Time	Displays backup time in seconds and usual range of the backup time.
   Data Transferred	Displays total size of data transferred over the network and usual size range of the data transferred. For deduplication storage devices the size can be less than the actual image size. For other storage devices the size is same as the backup image size.
   Score	Displays the anomaly score.
   Report as False Positive	This can be done in two ways: Select the checkbox corresponding to the record and click Report as False Positive to confirm that the record is not an anomaly. Select multiple records and click Report as False Positive to confirm that the records are not anomalies. During multiple selections, the option is in a disabled state if at least one record is confirmed as an anomaly. Remove the record from the selection and confirm that the selected records are not anomalies. You must also enter a reason why any of the selected records are not anomalies.
   Confirm as anomaly	This can be done in two ways: Select the checkbox corresponding to the record and click Confirm as anomaly to confirm that the record is an anomaly. Select multiple records and click Confirm as anomaly to confirm that the records are anomalies. During multiple selections, the option is in a disabled state if at least one record is confirmed as not an anomaly. Remove the record from the selection and confirm that the selected records are anomalies.
   View Job Log	Click to view the job log and job history.
   Refresh	Click to update the anomaly list. Any actions that you performed are removed.
   Collapse All	Click to collapse all expanded records.

3. Click Apply Filter to filter and view the anomalies.

   By default, anomalies for the last 7 days are displayed.

4. On the Manage Anomaly Detection window, select the filters and click OK.

   Job Name	Select Enable this filter to filter records based on the job name.
   Resource Name	Select Enable this filter to filter records based on the resource name.
   Detection Time	Select Enable this filter to filter records based on the time period. You can filter the records for a selected number of days or select a date range. Ensure that the date range does not exceed 30 days.
   Severity	Select Enable this filter to filter records based on the severity of the anomaly.

5. Click OK.