Some Logs disappeared in VBR Console

[Stabz]

Hello,
One of my clients experienced fraudulent activities on their backup server. Jobs were disabled/deleted, some replicas has been deleted. I conducted searches in the logs, but unfortunately it seems that the files have been deleted too in the Veeam Folders.
In the Veeam console, I have gaps in the dates, yet some jobs continued to function during this period (email reports received).
Are the logs in the Veeam console stored in the database or in files?

[Mildur]

Hi Philippe,

It should be in the database. Enterprise Manager can export a high level audit report. But it doesn't contain detailed audit information.
I recommend connecting the backup server to a Veeam One instance to generate an Audit Report. However, it may be best to disconnect the backup server from the network for now and immediately involve a security expert before proceeding with anything on the backup server.

Best,
Fabian

[Stabz]

EM was not enabled.
Look the logs I have nothing in the logs in the console between the 24/02 and 04/03
https://i.postimg.cc/dVwDSbrF/One-Replica.png

The replicas are not presents for this interval
https://i.postimg.cc/255yCn0X/2025-03-18-10h28-34.png

But the jobs ran during this period, my customer received the notifcation by mail.

How is it possible to delete the logs in the console for this period ?

[Mildur]

For logs, i recommend to review the log retention settings first: https://helpcenter.veeam.com/docs/backu ... ml?ver=120

Make sure to enable <Show all sessions>, then return to the history node and press F5. Change the sort order to Start time and verify the list again.
If some logs are still missing, then I would investigate with our customer support team.

Best,
Fabian