Need to track the changes in netbackups

fitrat's picture
fitrat
November 5th, 2009

Hi All
We have a team of 8 members
We need to track all the changes in netbackup environment specially backup policy configuration
Please suggest me how can we track the changes like below

1. who has modified the backup policies / schedule / backup selection / attributes / bp.conf
2. what has been modified in the backup policies / schedule / backup selection / attributes / bp.conf
     Old vaule & new vaule
3. When changes are done
:::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::
etc etc..................

Please suggest

Thanks in advance
FitRat

Filed under: , , , ,
0 votes
Nicolai's picture
Nicolai
2 weeks 3 days ago

Policy audit file

Netbackup doesn't have a complete audit function (But I wish one too) . A limited  policy audit function exist however.

How to monitor when a NetBackup policy is deleted, or when a schedule or client is deleted from a policy.

+3 (3 votes)
Baski's picture
Baski
2 weeks 3 days ago

Hi, This is Best question.

Hi,

This is Best question. Even our team 20 members are there . It is very difficult to trace who done what. I think , some audit files are there on unix ( Java log files) exact name i don't know.  Expacted somebody reply on this.

0 votes
gavrilov's picture
gavrilov
2 weeks 3 days ago

Nikolai right. This is only

Nicolai right. This is only one solution from Symantec. But you have unlimited tools form your OS to audit all commands and users.

+1 (1 vote)
J.Hinchcliffe's picture
J.Hinchcliffe
2 weeks 3 days ago

Has been asked before

This has been asked before and nobody has a good answer.
NOM can tell you when a policy was change and what was changed but not who changed it.
You can make NOM email this out to a group of people whenever it happens.

And then whomever did the change would be required to go in and put in a comment - now this means that you have to trust them to put in the comment - but you can see that it tells you what part of the policy was changed - in this example it was the schedules.
This is also kept in the NOM logs for as long as you set it up for - in my case I can got back 1 year to look at these alerts.

 

var alertId = '296';

Details for Alert ''Policy: Testing Changed ''
  Alert ID: 296
  Summary : Policy: Testing Changed
  Description : Date: May 27, 2009 11:15 AM
Changed Policy Name: Testing
Master Server: MyMaster 
Policy Attributes Modified
 Schedules
 
  Severity : Informational 
  Status : Active 
  Host : MYmaster
  Raised On : May 27, 2009 11:15 AM
  Assignment State : Unassigned
  Assigned To :  
  Updated By :  
  Updated On : May 27, 2009 11:15 AM
 
 

Comments
   
 Comment   Creation Time   Created By 
  
     

var alertComments = tables.setupTable({hasCheckbox:false,tableID:"alertComments",tableJSName:"alertComments",contextPath:"/nom"});
try { alertComments.onselect = function () {tableRowSelected(this)}; } catch(e) {}
alertComments.tableName = "Comments";
alertComments.sortEnabledArr = [true,true,true];
alertComments.doServerSort=true;
alertComments.pagingURL ="https://kwiapnbp01:8443/nom/objectselect.do?view=details&table=alertDetails&group=-1&tableID=alertComments&subtask=alerts&filter=information&contextType=serverGroupContext&viewset=alertAttributes&tableActionType=getTablePage&tab=monitor&guid=296%3B1%3Bfalse&name=296&viewId=alertDetails";
alertComments.hideURL ="https://kwiapnbp01:8443/nom/objectselect.do?view=details&table=alertDetails&group=-1&tableID=alertComments&subtask=alerts&filter=information&contextType=serverGroupContext&viewset=alertAttributes&tableActionType=hideTable&tab=monitor&guid=296%3B1%3Bfalse&name=296&viewId=alertDetails";
alertComments.saveColWidthURL ="https://kwiapnbp01:8443/nom/objectselect.do?view=details&table=alertDetails&group=-1&tableID=alertComments&subtask=alerts&filter=information&contextType=serverGroupContext&viewset=alertAttributes&tableActionType=saveColWidths&tab=monitor&guid=296%3B1%3Bfalse&name=296&viewId=alertDetails";

I don't have to know how to spell....I work on Unix.

+1 (1 vote)
fitrat's picture
fitrat
2 weeks 8 hours ago

Thanks everyone for your

Thanks everyone for your suggestions

0 votes