And, of course alerts on changes to alerting settings
-
KarmaKuma
- Enthusiast
- Posts: 57
- Liked: 7 times
- Joined: Feb 05, 2022 11:16 am
- Contact:
Alert on immutability settings change without Veeam One
Is there a way to send/recieve alerts on changes to the immutability settings (enabled/disabled, immutable time) without having Veeam One?
And, of course alerts on changes to alerting settings
And, of course alerts on changes to alerting settings
-
Regnor
- VeeaMVP
- Posts: 1100
- Liked: 348 times
- Joined: Jan 31, 2011 11:17 am
- Full Name: Max
- Contact:
Re: Alert on immutability settings change without Veeam One
Well, Veeam ONE would be the perfect solution to this 
Changes to repositories create an event.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
You could create a tasks which sends an email each time this event is logged in Windows.
Or, use the Syslog Integration, and forward all events to a SIEM solution.
Changes to repositories create an event.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
You could create a tasks which sends an email each time this event is logged in Windows.
Or, use the Syslog Integration, and forward all events to a SIEM solution.
-
KarmaKuma
- Enthusiast
- Posts: 57
- Liked: 7 times
- Joined: Feb 05, 2022 11:16 am
- Contact:
Re: Alert on immutability settings change without Veeam One
That means Veeam B&R by itself (without external/3rd party tooling) does not offer any solution?
-
Regnor
- VeeaMVP
- Posts: 1100
- Liked: 348 times
- Joined: Jan 31, 2011 11:17 am
- Full Name: Max
- Contact:
Re: Alert on immutability settings change without Veeam One
That's right, VBR itself doesn't have a built-in notification for those settings. From a security perspective it's better to have an external system monitoring security related events and settings. If a bad actor gains access to your backup and manipulates its configuration, notifications would probably also get disabled or altered.
So whether it's Veeam ONE, a SIEM solution or a regular monitoring software (or a combination), I would recommend to have it separate from VBR.
So whether it's Veeam ONE, a SIEM solution or a regular monitoring software (or a combination), I would recommend to have it separate from VBR.
Who is online
Users browsing this forum: Baidu [Spider], Google [Bot] and 22 guests