Host-based backup of VMware vSphere VMs.
Post Reply
Barryp
Lurker
Posts: 1
Liked: never
Joined: Nov 20, 2017 3:27 pm
Full Name: Barry Prendergast
Contact:

identify who disabled backup job

Post by Barryp »

Hi

could anyone advise how I confirm who disabled a backup job that was disabled around 5 weeks ago. I can see that its been disabled but there is no user account information next to it. we are running Veeam backup & replication from a machine running on windows server 2012R2 standard. Our Veeam version is 8.

thanks
Shestakov
Veteran
Posts: 7328
Liked: 781 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: identify who disabled backup job

Post by Shestakov »

Hi Barry,
If you use Veeam ONE, check Job Configuration Change Tracking report, it shows who and when made changes, including job schedule disabling.
Thanks!
flesz
Influencer
Posts: 14
Liked: never
Joined: Aug 31, 2012 9:36 am
Full Name: Patrick
Location: UK

Re: identify who disabled backup job

Post by flesz »

what if I don't use veeam one?
Is there a way to see who enabled the job? (job was disabled for over a year and started recently)
Shestakov
Veteran
Posts: 7328
Liked: 781 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: identify who disabled backup job

Post by Shestakov » 1 person likes this post

You can start using it, since you clearly have the need :)
This specific feature is available in free product edition.

Besides you can try to find it in the backup server debug logs.
ian6754
Novice
Posts: 4
Liked: never
Joined: Oct 29, 2021 2:09 pm
Full Name: Ian Midgley
Contact:

Re: identify who disabled backup job

Post by ian6754 »

Just in case anyone stumbles across this like I did the log you need to look for is svc.veeambackup.log (or rotated svc.veeambackup.1.log) in C:\ProgramData\Veeam. Search for "Job schedule was disabled". Enjoy.
veremin
Product Manager
Posts: 20283
Liked: 2258 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: identify who disabled backup job

Post by veremin » 1 person likes this post

You can also check Windows Event logs for event 23050. The event gets triggered when a job is disabled, the event details should contain information about user who does that. Thanks!
Post Reply

Who is online

Users browsing this forum: Semrush [Bot] and 70 guests