VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
I agree with you on the hardware vendor space @MicoolPaul! I do think that Veeam can continue to innovate in the storage related features that get added to the product to help with backup repository performance and features.
Veeam does not have a native way to push syslog to other applications without use of a few API calls, and/or robo copy. However, there are plenty of tools that can read read the Windows Event Logs. Veeam started putting VBR events in the Event Viewer as a way to get them into Microsoft System Center Operations Monitor (SCOM) so we could alert on them with the MP. There are plenty of tools that can report and alarm off of Windows Events. In certain cases, Veeam One custom alarms can be triggered from a specific event log message as well. VBR can send basic SMNP traps to an SMNP trap receiver. The MIB is in the Installation iSO.
The SNMP mibs are based on job monitoring - red, yellow, green and runtime stats. It’s really basic monitoring. Most all Veeam events -security, config changes, restores, job runs, etc. get sent to the event logs. This function was actually added to VBR to make it easier to get VBR info into Windows System Center Operations Monitor (SCOM) which allowed for more granular reporting and Alerts from or SCOM Management Pack - aka The MP! The MP is our Enterprise monitoring and alerting program.
@Link State I always prefer a native database dump and backup for these situations.However, the majority of DB2 customers that I have talked with do not like the DB2 native backup with log truncation for a number of reasons. The main reason is that there is no quiescent if the DB and the transactions logs need to be gathered during the backup and restores need log replays. This makes for a longer backup and longer restores. In most instances it is hard to go back and change their DB2 behavior to work like this.The customers who have used this are usually running the DB2 on arrays that create fast array snapshots - so it’s not much of a disruption to do a momentary DB pause then a fast array snapshot then the db resume write. They see it as a lesser of 2 evils.
Great observation! Thanks for sharing!
Even though the Huawei storage integration is no longer available you can still backup VM data from that array through Direct SAN access, hotadd (virtual appliance mode) and NBD (network) mode.
Thanks for sharing! I am glad the outcome was good! I had a scary situation once over a Christmas holiday when trying to add a new IO board to a storage array. The procedure I used went bad and the entire production array started shutting down and required a reboot! Nothing like hearing 100’s of disk drives home and turn off! It really makes you feel like you are going to faint! 😉 Fortunately I had weeks worth of good Veeam backups to restore from and was able to get the array back in working order in a matter of hours!
@regnor I am always amazed at the customers who leave a weeks worth of newly written tapes in there library - 😱. They will be the ones who will complain when they loose data during a disaster.
Backup copy is the law… 👮🏼!@wolff.mateus How true and one that quite a few people don’t think about.
The best practices guide for the concurrent tasks. Th eBP guide wills its I/3rd of the total amount of proxy tasks (cores) send data to the repo. Remember the gateway needs to sized like a repository sever so make sure you follow the RAM and CPU recommendations. On more thing you will need to consider when sizing the repo with the required tasks. Will you be doing any SOBR offloads to object storage, or backup copy jobs? If so then make sure you have some extra task slots (CPU) available in your gateway server so the offload can keep running when the backup runs. Th backup job has priority over offload jobs so it will take tasks assign to offload to complete a backup job if there is not enough proxy tasks assign to the gateway.
@Stabz This is a great feature but sending on-premesis backups to object storage have me a little concerned. One issue I am afraid that will crop up is bandwidth issues. Users will need to make sure they have enough bandwidth and object inject speed to handle their backup traffic in their stated backup window. The second issue I worry about is that hope will think since they have a backup in the cloud they won’t need a second copy somewhere else. I think that will be a big mistake. Personally I am going to discuss this as a great on-premesis solution to provide immutability with the hassle of learning Linux - and may well be easier to maintain for some shops. Then do a backup copy job to an off-site location.
We need an Immutable Tape solution so we can leave tapes in the library. Perhaps a setting that can only be configured on the physical console of the library to set over write policies. haha Weekly exports become a challenge for myself, but I should get back on that. Well - you could use WORM media if you want to leave tapes in a library. But thruthfully why? I realize that swapping tapes is time consuming - I did ny myself for 10 years. But the benefit of having a true copy of your data not connected to a network or visible to the world can provide huge dividends in a disaster.
Backup copy to another bucket in other region ? :D I was implying direct to object storage. Sure, adding a copy job helps, but then that is not too much different than a backup copy to object storage :). I can already do that. I guess if you backup direct to object storage, the copy to another bucket, it could potentially eliminate the need for on prem storage. That is a hugely added bonus for some. I like my fast restores though and as a storage guy I enjoy having my own disk. I also find some vendors, if you want to get OUT of their storage would cost an insane amount. If it’s archive data, I tend to put some of it to tape and have that data in object storage as well. I use the object storage for restores as I can still extract app aware files without pulling in a whole VM. If I was to switch clouds, I own the tape and it would be free to stage it somewhere and upload somewhere else. Well - correct. backup direct to object in the cloud does have some more architectur
The Veeam plugin for Oracle is really pretty easy to understand once you understand the Oracle side! Thanks for the RMAN explanation, @ECraig34!
You know - In my role I see just as many people who don’t want to use Linux as those who don’t want to use Windows. Kinda’ reminds me of the old Novell vs Microsoft days! 😁 I would like to see more role-based-access and self service functions with a main Veeam portal. Kind of combine what you get in the Veeam Service Provider Console (SSPC) with the Backup Enterprise Manager (BEM) and the full functionality of the VBR thick client. And extend that out to RBAC for the Explorers. Let application end users use the explorers for application restore without having to get into VBR.
I would use the replicas to provide quick failover incase of a physical location, or hardware failure. Recovering from a replica after a malware infection cn be hard as the changes get replicated to the target VM almost instantly if you are using CDP.To recover from a Malware attack you’d be better off recovering files from the last know good backup. The backups can be checked with sure backup and you can use secure restore to make a VM is cleaned of a zero day malware attack before it get recovered.
Unless I’m mistaken, I believe you can also create SureReplica jobs and have it scan the VM image for malware like you can in SureBackup. Of course, you’ll need to have an up to date AV/Antimalware application to do the scanning, but it may be helpful in identifying malware sitting on the VM. https://helpcenter.veeam.com/docs/backup/vsphere/surebackup_job_settings_vm.html?ver=110 You’re talking about Sure Restore featurehttps://helpcenter.veeam.com/docs/backup/vsphere/av_scan_about.html?ver=110 SureRestore can do this, but I learned on the VeeamON Update Labwarz that you can do it on SureBackup jobs as well. I double checked and it’s an option for doing SureReplica jobs as well since it’s the same wizard. Sure, but if a file got encrypted at the source, and then get’s replicated to a target it’s still encrypted. SureReplica can test the viability of failover and scan for malware but it won’t fix errors. A backup copy might allow you to restore to
To protect your NFS shares you can use the Veeam NAS file backup job. Set you NFS server up in the inventory section as a filer, or if it’s a NFS file server set it up as a File server. You can also set the filer up to allow Veeam to integrate with the snapshots and backup from there. Define a few “agent” proxies then go configure the NAS backup to backup the files, or file shares you wish to protect. https://helpcenter.veeam.com/docs/backup/vsphere/file_share_support.html?ver=110
@MicoolPaul my! I forgot all about V10 reaching the end of fix status soon! Good post!
Needs clarification To create a Scale-Out Backup Repository (SOBR) with a Archive Tier, Am I required to have a EC2 Instance Proxy? I think it does, but do I create it or does the Veeam application creates when I configure my backups for retention? https://helpcenter.veeam.com/docs/backup/vsphere/glacier_proxy_appliance.html?ver=110 Yes for the Archive tier we need a server with EBS disks. That is a”helper server” that is used to change the block size of what’s stored in S3 to match the recommended block size in Glacier.
Probably something go wonky in the vCenter cache. To clear they removing the VM from the job, then click on the rescan button (the little circle arrows) in the add dialogue page and then read the VM. It should show the correct VM size.
@vmJoe& @vNote42 are we sure about the size should reflect differently considering the disks are non-persistent independent disks? If there is a regular VMDK that size should show up here. Typically when I see this it’s do to the vCenter cache service. But yes - independent disks can affect this sizing.
Great advice, Nicco! I think that the advice about practice for the VMCE is perfect! You really need to have spent some time in the GUI to understand all the VBR features and GUI options!Great post!
We need an Immutable Tape solution so we can leave tapes in the library. Perhaps a setting that can only be configured on the physical console of the library to set over write policies. haha Weekly exports become a challenge for myself, but I should get back on that. Do you know Active Vault or Ransomware block from Quantum? If you leave a tape in a library it can be found in inventory, loaded to a tape and accessed - read, or data can be deleted from it. The purpose of tape is to have a transportable media that you can take out of a library and store somewhere. If it’s off the network (physically outside a library) who can access the stored data? If it’s in the library or accessible over a network someone will be able to get to the data. if you don’t want to export the tape why not just send data to object storage in a different location (S3, Azure, Wasabi, GCP, etc) at least it is behind a separate firewall and uses a different authentication method and Veeam ca
This is awesome Joe. Love seeing troubleshooting tips like this as they are so useful. 👍 Thanks, Chris! I search all over for some guidance on this issue and I did not find very much. So I decided what the heck! I’ll blog. This is the first time I have ever heard of Datdog and never released they would use 6162 like Veeam does.
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
