Query: how to identify user who made a change

[JDF]

Hi All
I am struggling to find a way to easily identify what user made a change to a job, in this particular case a backup job was disabled. We are using Veeam One but that doesnt seem to give us what we want.
Many thanks
JDF

[Mildur]

Hi Jason

Have you tried job configuration change tracking report?
https://helpcenter.veeam.com/docs/one/r ... ml?ver=110

Thanks
Fabian

[JDF]

Hi Fabian
Yes tried that one, comes back blank. Its been a steady platform in terms of changes for ages now apart from the regular job disabling for external DR testing purposes

[Mildur]

Hi Jason

I run a test in my lab. My report shows the job after I disabled it.
"Scheduled = False":


Make sure to choose the right interval for the report.
If you don't see the change in your report, maybe a support case is required.

Thanks
Fabian

[JDF]

Mmm, our Veeamone obviously excluding something in its data import, something else to look at I reckon. However, think I have found it in the console user log, would this be the right sort of record Im looking for?

[10.11.2022 08:54:16] <01> Info Starting command: Veeam.Backup.UI.JobDisableScheduleCommand
[10.11.2022 08:54:16] <01> Info Started command: Veeam.Backup.UI.JobDisableScheduleCommand
[10.11.2022 08:54:17] <01> Info Finished command: Veeam.Backup.UI.JobDisableScheduleCommand

[Mildur]

I would fix the collection issue in Veeam One first. Going through all user's console log files can be really time intensive.

As an alternative if you have the enterprise manager deployed, you can also use it to retrieve an audit report:
https://helpcenter.veeam.com/docs/backu ... ml?ver=110

[JDF]

good stuff, thank you Mildur