Identify who initiated VeeamZip backup

Availability for the Always-On Enterprise

Identify who initiated VeeamZip backup

Veeam Logoby DeadEyedJacks » Wed Aug 02, 2017 1:58 pm

We need to establish who ran a VeeamZip backup of a VM.
How do we find this information within vSphere or Veeam Backup logs.
(VMware tasks and events just shows Veeam service account creating snapshot.)


Secondly, can we disable, remove or restrict use of this option, which is being widely misunderstood and is potentially disaterous as it defaults to targeting the system drive of the Veeam Backup server...


Case# 02267830
Microsoft, NetApp, Symantec, Veeam, Veritas and VMware certified professional
MCTS, MCSE, NCDA, NCIE-BR, ASC, SCS, VMTSP, VTS, VCP
DeadEyedJacks
Veeam ProPartner
 
Posts: 94
Liked: 10 times
Joined: Mon Oct 12, 2015 2:55 pm
Location: UK
Full Name: DeadEyedJacks

Re: Identify who initiated VeeamZip backup

Veeam Logoby Dima P. » Wed Aug 02, 2017 6:36 pm

Hello DeadEyedJacks,

Not sure (never tested myself) but try to check windows event log for event 110:
110 Backup job started <Job type> job "<Job name>" has been started. Info Backup

In the event details look for the User field and associated windows account.
it defaults to targeting the system drive of the Veeam Backup server...

If possible, remove the default C:\Backup repository. Once done this location should not appear under repository thus users won’t be able to choose it.
Dima P.
Veeam Software
 
Posts: 6489
Liked: 452 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: No registered users and 41 guests