Windows Event IDs for successful backup

[DNeb]

I'd like to monitor successful backups my watching for success events in the Event Log. Does anyone know of a documented list of event IDs (and event sources) that Veeam might use to indicate a good backup?

Thanks

[Dima P.]

Hello,

I am not sure that there is a specific event ID list, but backup jobs could be successfully traced by Event Viewer > Applications and Services Logs -> Veeam Backup.

Cheers!

[foggy]

There's no documented list, however, from what I see in Event Log, there are the following success events in the Veeam Backup log:

Code: Select all

ID 1 - VM backup started
ID 2 - VM backup completed
ID 0 - backup job completed

Event source is always Veeam Backup. Should be sufficient for monitoring.

[DavidReimers]

My client uses a monitoring solution which includes the ability to crawl the Windows event logs for specific events. I would like to know if Veeam can write the Windows event log when a job is completed (or failed) so I can create a summary of all Veeam jobs that run overnight (i.e. poll the event log for the 3 job completion messages, and send an alert if all 3 are not found).

I have checked the documentation and haven't been able to find a way.

[veremin]

Hi, David,

Your post has been merged into existing discussion regarding similar matter. Please, see the answers provided above for more information about specific Windows event that can be tracked by your monitoring solution.

Thanks.

[Vitaliy S.]

Hello David,

Yes, Veeam B&R has its own Windows Event log. You can find the description of all possible events in this KB article > http://www.veeam.com/kb1834

Thank you!

[1971merlin]

I am seeing Event log ID's 710, 790 etc.

These are not documented? Could the docs please be refreshed to document ID's 710, 790, 810, 890 etc. with source "Veeam MP", "Veeam Backup" etc.

The generating server is a Veeam backup and replication 9.5 update 4 community edition, backing up a single physical server that veeam itself is installed on.

Code: Select all

Log Name:      Veeam Backup
Source:        Veeam MP
Date:          26/09/2019 9:21:13 PM
Event ID:      790
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      WINSVR16.corp.local
Description:
Agent Backup job 'Backup WINSVR16' finished with Success.
All VMs have been backed up successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Veeam MP" />
    <EventID Qualifiers="0">790</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-09-26T11:51:13.468427300Z" />
    <EventRecordID>452</EventRecordID>
    <Channel>Veeam Backup</Channel>
    <Computer>WINSVR16.corp.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>d60ba5fc-8bf3-458c-b681-eaef08fc3b92</Data>
    <Data>91fbef2a-7478-4163-80f5-e4270d80cbdb</Data>
    <Data>0</Data>
    <Data>12003</Data>
    <Data>6</Data>
    <Data>True</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>1</Data>
    <Data>Agent Backup job 'Backup WINSVR16' finished with Success.
All VMs have been backed up successfully.</Data>
  </EventData>
</Event>

"All *VMs* have been backed up successfully -- but this is a physical server - no virtualization here. I realize this is just a wording/language nitpick, however it probably shouldn't use a word out of context. This is a "windows agent backup", not a 'VM' backup.

[Vitaliy S.]

Hi Craig, thanks for the heads up. I will ask to add these events to our documentation.

[rdixon01]

Does anyone know how the write a createevent to the Application and Services Logs \ Veeam Backup log location. For testing.

[Vitaliy S.]

Can you please clarify what you're trying to achieve with writing events to the Veeam backup log? If you start some activity within the Veeam B&R console you will immediately see a triggered event.