Skip to main content

Hello all,

I am looking for a "simple" way to generate a notification when a backup or copy job is edited in VBR. The idea at the beginning is just to get an info (mail), not to rate the modification, if it’s a good or bad modification. Examples of bad changes would be reducing retention, changing encryption password, etc.

Ideas how to realize this? Native in VBR i think there is nothing, Veeam One? External monitoring? Script?

Many greetings
Matze

Hi @MatzeB ...yes, Veeam One has a report for this. Forgot the exact report name off hand. 


This is the report @coolsport00 mentioned:

https://helpcenter.veeam.com/docs/one/reporter/job_configuration_change_tracking.html?ver=120


Looks like it's called Job Configuration Change Report

https://www.veeam.com/blog/veeam-one-reports.html


Awesome! Thanks @haslund 😊


Another reason to use “file copy job” to get an additional copy of your configuration database.  If there is a rogue actor changing your backup jobs, having more than one copy of your configuration database may prove useful if the job setup is complex.  (3-2-1 rule)


Another reason to use “file copy job” to get an additional copy of your configuration database.  If there is a rogue actor changing your backup jobs, having more than one copy of your configuration database may prove useful if the job setup is complex.  (3-2-1 rule)

Probably start off by enabling MFA on the console, now you are limited to only known employees. If one of them is making unapproved changes that can’t be explained, get rid of their access for now.


Argh....I even looked shortly in Veeam One before but obviously with the wrong keywords. Thanks for the tip - exactly what I was looking for! For all those interested in how a retention change or encryption password change looks like here is a screenshot.

 

Thanks!

Matze


Native in VBR i think there is nothing...

 

There is: Look at the Windows Event Log on the VBR Server, “Applications and Services Logs / Veeam Backup”, and search for Event ID 23050 (Source “Veeam MP”).


Comment