Veritas-bu

Re: [Veritas-bu] Audit time again, need NetBackup backup success or failure history.

2007-07-02 18:15:05
Subject: Re: [Veritas-bu] Audit time again, need NetBackup backup success or failure history.
From: "Sesar, Steven L." <ssesar AT mitre DOT org>
To: "Curtis Preston" <cpreston AT glasshouse DOT com>, "Peter Buschman" <plblists AT iotk DOT com>, "BeDour, Wayne" <WBedour AT lear DOT com>, <veritas-bu AT mailman.eng.auburn DOT edu>
Date: Mon, 2 Jul 2007 17:56:50 -0400

Precisely.

An auditor worth his/her salt, would ask for proof of backups AND restores, each performed on a regular basis.

A logged backup means nothing in the world of data protection. There are so many holes in relying on backup logs alone, that it would be prohibitive to attempt to list them all.


Again, just my $.02

===================================

   Steven L. Sesar
   Lead Operating Systems Programmer/Analyst
   UNIX Application Services R101
   The MITRE Corporation
   202 Burlington Road - MS K101
   Bedford, MA 01730
   tel: (781) 271-7702
   fax: (781) 271-2600
   mobile: (617) 519-8933
   email: ssesar AT mitre DOT org

===================================




-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu on behalf of Curtis Preston
Sent: Mon 7/2/2007 5:26 PM
To: Peter Buschman; BeDour, Wayne; veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Audit time again,need NetBackup backup  success or failure history.

I would agree with Peter (mostly).  I would add that if the image is
there AND it's of a similar size to other images of that system, then
it's proof.  You can have a failed backup that still saves part of its
image to the catalog.  The other problem with bpimagelist is that it
doesn't have the name of what's in the image.  You can list that the
client in question had 5 backups on that day, but unless you have
something more than bpimagelist, there's no way (on the command line) to
verify that those five backups contain the filesystems they should
contain.  For example, what if the server in question had 6 filesystems?
What if it had 5 filesystems, but this is 5 backups of only 1 of them
and not of the other 4?  You could verify this by using the restore GUI,
but I don't know of any way to do it on the command line.  I'm wondering
about bpflist, but I'm not sure.... 



It would be nice if you could use bpflist to grab the initial mount
point of the backup (can you?), then script it to show the mount points
that were backed up that day.  That still doesn't solve the first
problem that one of the backups could be partial, etc.



The true audit test, of course, would be to do an alternate restore of
the thing.  To hell with logs, baby, give me a restore!



---

W. Curtis Preston

VP Data Protection

GlassHouse Technologies



________________________________

From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Peter
Buschman
Sent: Monday, July 02, 2007 9:19 PM
To: BeDour, Wayne; veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Audit time again, need NetBackup backup
success or failure history.




Wayne:

If the retention period is longer than 6 months, you can get this
information from the bpimagelist command.  Proof that an image exists is
proof of a successful backup.  If the retention period is less than 6
months and you do not have a reporting product or are keeping logs some
other way, then I am afraid you are out of luck.

Best regards,

Peter Buschman

At 21:57 2.7.2007, BeDour, Wayne wrote:



Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
         boundary="----_=_NextPart_001_01C7BCE3.42866C0B"

Our environment is HP-UX 11.11, Netbackup 5.1 MP3 backing up mostly HP
unix with some Sun and Windows backups.  It's audit time again and the
auditors are asking for validation that a backup ran 6 months ago.  They
give me the date and machine / policy and want me to come up with proof
that it was successful.  We are running Advanced Reporter but don't keep
logs that old.  Obviously we do not run any other third party reporting
application such as Aptare but may be in the market in the future.  I
have been going through the manual but have yet to come up with how to
get that info from NetBackup or if it is even available at this time.
Any help will be appreciated.
thanks

Wayne BeDour
IT Unix System Administrator
PH: 313-240-3374  FAX: 313-240-3065
Internet:  wbedour AT lear DOT com

**********************
** LEGAL DISCLAIMER **
**********************

This E-mail message and any attachments may contain
legally privileged, confidential or proprietary
information. If you are not the intended recipient(s),
or the employee or agent responsible for delivery of
this message to the intended recipient(s), you are
hereby notified that any dissemination, distribution
or copying of this E-mail message is strictly
prohibited. If you have received this message in
error, please immediately notify the sender and
delete this E-mail message from your computer.
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu