Comprehensive data protection for all workloads
Post Reply
DeadEyedJacks
Veeam ProPartner
Posts: 141
Liked: 26 times
Joined: Oct 12, 2015 2:55 pm
Full Name: Dead-Data
Location: UK
Contact:

Identify who initiated VeeamZip backup

Post by DeadEyedJacks »

We need to establish who ran a VeeamZip backup of a VM.
How do we find this information within vSphere or Veeam Backup logs.
(VMware tasks and events just shows Veeam service account creating snapshot.)


Secondly, can we disable, remove or restrict use of this option, which is being widely misunderstood and is potentially disaterous as it defaults to targeting the system drive of the Veeam Backup server...


Case# 02267830
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Identify who initiated VeeamZip backup

Post by Dima P. »

Hello DeadEyedJacks,

Not sure (never tested myself) but try to check windows event log for event 110:
110 Backup job started <Job type> job "<Job name>" has been started. Info Backup
In the event details look for the User field and associated windows account.
it defaults to targeting the system drive of the Veeam Backup server...
If possible, remove the default C:\Backup repository. Once done this location should not appear under repository thus users won’t be able to choose it.
Post Reply

Who is online

Users browsing this forum: No registered users and 227 guests