- Service Provider
- Posts: 166
- Liked: 34 times
- Joined: Jan 22, 2015 2:39 pm
- Full Name: Stefan Renner
i know this has been ask a couple of times but i can't find any solution really.
Where can I find all tasks and actions administrators executed in VBO?
I have a customer with the incident that a admin restored and read classified content and need to collect evidence for this.
Issue is it would be good to know the relevant data logs where i can find the informations rather than reading hundrets of logs now.
Is there any kind of audit logging?
Solution Architect, Bechtle
VMware vExpert, VCP
NetApp United Member, NCIE & NCDA, Cisco Champion
Microsoft MCP, Veeam VMCA
- Product Manager
- Posts: 6863
- Liked: 910 times
- Joined: Feb 08, 2013 3:08 pm
- Full Name: Mike Resseler
- Location: Belgium
There is. I will give you a more detailed answer as you requested this week, but I haven't got to that
But all actions (even previewing a mail or file) are logged in the restore sessions. We also have a system in place to warn suspicious actions (REST API only to create those rules) https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=50