Veritas Data Insight 6.1 Administrator's Guide
- Section I. Getting started
- Introduction to Veritas Data Insight administration
- Configuring Data Insight global settings
- Overview of Data Insight licensing
- About scanning and event monitoring
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Data Insight integration with Symantec Data Loss Prevention (DLP)
- Configuring advanced analytics
- About open shares
- About bulk assignment of custodians
- Section II. Configuring Data Insight
- Configuring Data Insight product users
- Configuring Data Insight product servers
- About node templates
- About automated alerts for patches and upgrades
- Configuring saved credentials
- Configuring directory service domains
- Adding a directory service domain to Data Insight
- Configuring containers
- Section III. Configuring native file systems in Data Insight
- Configuring NetApp file server monitoring
- Configuring clustered NetApp file server monitoring
- About configuring secure communication between Data Insight and cluster-mode NetApp devices
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Veritas File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- Adding filers
- Adding shares
- Renaming storage devices
- Configuring NetApp file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About the Data Insight web service for SharePoint
- Adding web applications
- Adding site collections
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Adding SharePoint Online accounts
- Adding site collections to SharePoint Online accounts
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Section VI. Configuring ECM data sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Section IX. Remediation
- Section X. Reference
- Appendix A. Backing up and restoring data
- Appendix B. Data Insight health checks
- Appendix C. Command File Reference
- Appendix D. Data Insight jobs
- Appendix E. Troubleshooting
- Troubleshooting FPolicy issues on NetApp devices
About SharePoint Online account monitoring
Data Insight provides the ability to monitor the unstructured data that resides in SharePoint Online, a cloud-based service from Microsoft. When you add a SharePoint Online account from the Management Console, Data Insight discovers the site collections configured for that account. You can also configure Data Insight to exclude certain site collections from being monitored. This might be a requirement when you have personal data that you do not want to be monitored.
The SharePoint Online storage hierarchy consists of account, site collection, sites, or document or picture library. Data Insight logically maps to these descendants as filers, shares, and folders or files.
Data Insight scans the site collections and the sites in the hierarchy to collect the metadata properties such as the file creation date, gathers events. Note that Data Insight does not collect the permissions data for the SharePoint Online accounts.
Data Insight scans the sites, and document and picture libraries available in a SharePoint Online account that resides on the following SharePoint versions:
Microsoft SharePoint™ 2016
Microsoft SharePoint™ 2013
You must perform the following steps to enable Data Insight to monitor a SharePoint Online account:
Complete all the prerequisite configurations.
See Prerequisites for configuring SharePoint Online account.
Configure an administrator account in SharePoint Online in Office 365 and make sure that it has full control over the site collections. Data Insight uses this account to impersonate a user account to query the site collections.
Add the SharePoint Online account URL in the Data Insight Management Console. This URL must resolve to your organization's corporate SharePoint Server site.
See Adding SharePoint Online accounts .
After the account is added, you can view and manage it from the Management Console. See Managing a SharePoint Online account.
Make sure that the site collections are configured for the SharePoint Online account. You can configure Data Insight to automatically discover the site collections or manually add site collections to the configured Online accounts.
When adding a SharePoint Online account, exclude the following site collections from getting discovered.
You can safely exclude these site collections as they contain bookkeeping information which does include any relevant scan or audit information.
<companyname>.sharepoint.com/portals/community
<companyname>.sharepoint.com/search
<companyname>.sharepoint.com/sites/CompliancePolicyCenter
<companyname>-my.sharepoint.com
Once the SharePoint Online accounts are configured successfully, Data Insight starts receiving the access event information from the SharePoint Online server.
The following limitations apply when monitoring SharePoint Online accounts:
The ability to add SharePoint Online accounts and site collections in bulk using CSV is not supported.
Data Insight does not fetch permissions for SharePoint Online accounts. The Workspace > Expand Profile > Permissions tab will be hidden for SharePoint Online paths (share equivalent and folders). For this reason, you will also not be able to select configured SharePoint Online paths when creating Permissions reports and Entitlement Review workflows.
The test credential feature used to validate the network connectivity between the Collector and data sources is disabled.
Scan and audit exclude rules are not supported.
Scan errors are not reported on the Scanning dashboard for SharePoint Online scan failures. However, the sponline_connector_service and commd logs will contain information about these errors and exceptions.
Archive and classify actions for SharePoint Online paths are not supported.
You cannot create Data Loss Prevention (DLP) Incident Remediation workflows and the Records Classification workflows for SharePoint Online paths.
Discovery of site collections that are locked is not supported.
On the Settings > Scan Status page, ability to pause or cancel an in-progress scan job is not available. The jobs that are in the queues can be paused or canceled.
Certain audit events such as folder create, folder modified, and folder copies are not fetched for SharePoint Online accounts. This limitation is observed because Microsoft Office 365 does not support these event types.