Veritas-bu

[Veritas-bu] backup of windows event logs

2006-04-21 13:59:36
Subject: [Veritas-bu] backup of windows event logs
From: bobbyrjw AT bellsouth DOT net (Bobby Williams)
Date: Fri, 21 Apr 2006 13:59:36 -0400
This is a multi-part message in MIME format.

------=_NextPart_000_0024_01C6654B.D3F81000
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: 7bit

My first suggestion would be to upgrade the client software.  If you master
is running 6, then the client should be running at least 5.0.
 
I don't know why anyone would be surprised that the software is not behaving
correctly when you are not using it properly.
 

Bobby Williams 
2205 Peterson Drive 
Chattanooga, Tennessee  37421 
423-296-8200 

 

  _____  

From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Kilpatrick,
Mark
Sent: Friday, April 21, 2006 7:52 AM
To: WEAVER, Simon; veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] backup of windows event logs



Master server is solaris 8 netbackup 6Mp2.

 

Clients are Win2003 netbackup 4.5fp6

  _____  

From: WEAVER, Simon [mailto:simon.weaver AT astrium.eads DOT net] 
Sent: 21 April 2006 12:23
To: Kilpatrick, Mark; veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] backup of windows event logs

 

Not me! What version of NBU do you run then? What platform is your Master
on?

 

 

Regards

Simon Weaver
3rd Line Technical Support
Windows Domain Administrator 

EADS Astrium Limited, B32AA IM (DCS)
Anchorage Road, Portsmouth, PO3 5PU

Email:  <mailto:Simon.Weaver AT Astrium-eads DOT net> Simon.Weaver AT 
Astrium-eads DOT net

-----Original Message-----
From: Kilpatrick, Mark [mailto:mark.kilpatrick AT sabeo DOT com] 
Sent: 21 April 2006 12:05
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] backup of windows event logs

I have just discovered that the windows event logs are not backed up as part
of a All_Local_Drives backup. We were hoping to recover an event log that
was deleted and there are no backups of these logs in the directory that
they are located in on a windows server. There is no mention of a skipped
file in the policy details for theses clients. Is anyone aware of this and
is it expected behaviour?

Thanks, Mark

 

 

 

 

 

**********************************************************************

This email and any files transmitted with it are confidential and

intended solely for the use of the individual or entity to whom they

are addressed. If you have received this email in error please notify

Sabeo Technologies.

 

This footnote also confirms that this email message has been swept for the
presence of computer viruses.

**********************************************************************

 

This email is for the intended addressee only.
If you have received it in error then you must not use, retain, disseminate
or otherwise deal with it.
Please notify the sender by return email.
The views of the author may not necessarily constitute the views of EADS
Astrium Limited.
Nothing in this email shall bind EADS Astrium Limited in any contract or
obligation.

EADS Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS,
England
        

------=_NextPart_000_0024_01C6654B.D3F81000
Content-Type: text/html;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2873" name=3DGENERATOR>
<STYLE>@font-face {
        font-family: Tahoma;
}
@page Section1 {size: 612.0pt 792.0pt; margin: 72.0pt 90.0pt 72.0pt =
90.0pt; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
        COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
        COLOR: purple; TEXT-DECORATION: underline
}
P {
        FONT-SIZE: 12pt; MARGIN-LEFT: 0cm; MARGIN-RIGHT: 0cm; FONT-FAMILY: =
"Times New Roman"
}
SPAN.emailstyle17 {
        COLOR: windowtext; FONT-FAMILY: Arial
}
SPAN.EmailStyle21 {
        COLOR: navy; FONT-FAMILY: Arial
}
DIV.Section1 {
        page: Section1
}
</STYLE>
</HEAD>
<BODY lang=3DEN-US vLink=3Dpurple link=3Dblue>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D468495717-21042006><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>My first suggestion would be to upgrade the =
client=20
software.&nbsp; If you master is running 6, then the client should be =
running at=20
least 5.0.</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D468495717-21042006><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D468495717-21042006><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>I don't know why anyone would be surprised that =
the=20
software is not behaving correctly when you are not using it=20
properly.</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D468495717-21042006><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><!-- Converted from text/rtf format =
--></DIV>
<P><SPAN lang=3Den-us><FONT face=3DArial color=3D#000080>Bobby =
Williams</FONT></SPAN>=20
<BR><SPAN lang=3Den-us><FONT face=3DArial color=3D#008080 size=3D2>2205 =
Peterson=20
Drive</FONT></SPAN> <BR><SPAN lang=3Den-us><FONT face=3DArial =
color=3D#008080=20
size=3D2>Chattanooga, Tennessee&nbsp; 37421</FONT></SPAN> <BR><SPAN=20
lang=3Den-us><FONT face=3DArial color=3D#008080 =
size=3D2>423-296-8200</FONT></SPAN> </P>
<DIV>&nbsp;</DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> =
veritas-bu-admin AT mailman.eng.auburn DOT edu=20
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] <B>On Behalf Of =
</B>Kilpatrick,=20
Mark<BR><B>Sent:</B> Friday, April 21, 2006 7:52 AM<BR><B>To:</B> =
WEAVER, Simon;=20
veritas-bu AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> RE: [Veritas-bu] =
backup of=20
windows event logs<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=3DSection1>
<P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D2><SPAN=20
style=3D"FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Master server =
is=20
solaris 8 netbackup 6Mp2.</SPAN></FONT></P>
<P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D2><SPAN=20
style=3D"FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: =
Arial"></SPAN></FONT>&nbsp;</P>
<P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D2><SPAN=20
style=3D"FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Clients are =
Win2003=20
netbackup 4.5fp6</SPAN></FONT></P>
<DIV>
<DIV class=3DMsoNormal style=3D"TEXT-ALIGN: center" align=3Dcenter><FONT =

face=3D"Times New Roman" size=3D3><SPAN style=3D"FONT-SIZE: 12pt">
<HR tabIndex=3D-1 align=3Dcenter width=3D"100%" SIZE=3D2>
</SPAN></FONT></DIV>
<P class=3DMsoNormal><B><FONT face=3DTahoma size=3D2><SPAN=20
style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: =
Tahoma">From:</SPAN></FONT></B><FONT=20
face=3DTahoma size=3D2><SPAN style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Tahoma"> WEAVER,=20
Simon [mailto:simon.weaver AT astrium.eads DOT net] <BR><B><SPAN=20
style=3D"FONT-WEIGHT: bold">Sent:</SPAN></B> 21 April 2006 =
12:23<BR><B><SPAN=20
style=3D"FONT-WEIGHT: bold">To:</SPAN></B> Kilpatrick, Mark;=20
veritas-bu AT mailman.eng.auburn DOT edu<BR><B><SPAN=20
style=3D"FONT-WEIGHT: bold">Subject:</SPAN></B> RE: [Veritas-bu] backup =
of windows=20
event logs</SPAN></FONT></P></DIV>
<P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN=20
style=3D"FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P>
<DIV>
<P class=3DMsoNormal><EM><B><I><FONT face=3DArial color=3Dblue =
size=3D3><SPAN=20
style=3D"FONT-WEIGHT: bold; FONT-SIZE: 12pt; COLOR: blue; FONT-FAMILY: =
Arial">Not=20
me! What version of NBU do you run then? What platform is your Master=20
on?</SPAN></FONT></I></B></EM></P></DIV>
<DIV>
<P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN=20
style=3D"FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
<DIV>
<P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN=20
style=3D"FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
<P><EM><I><FONT face=3DArial color=3Dblue size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">Regards</SPAN></FONT></I></EM></P>
<P><EM><I><FONT face=3DArial color=3Dblue size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: Arial">Simon=20
Weaver</SPAN></FONT></I></EM><I><FONT face=3DArial color=3D#3f6296 =
size=3D2><SPAN=20
lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: #3f6296; FONT-STYLE: italic; =
FONT-FAMILY: Arial"><BR></SPAN></FONT></I><STRONG><B><I><FONT=20
face=3DArial color=3D#0000a0 size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: #0000a0; FONT-STYLE: italic; =
FONT-FAMILY: Arial">3rd=20
Line Technical Support</SPAN></FONT></I></B></STRONG><B><I><FONT =
face=3DArial=20
color=3D#0000a0 size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #0000a0; FONT-STYLE: =
italic; FONT-FAMILY: Arial"><BR><STRONG><B><FONT=20
face=3DArial><SPAN style=3D"FONT-FAMILY: Arial">Windows Domain=20
Administrator</SPAN></FONT></B></STRONG></SPAN></FONT></I></B><FONT=20
face=3DArial><SPAN lang=3DEN-GB style=3D"FONT-FAMILY: Arial"> =
</SPAN></FONT></P>
<P><I><FONT face=3DArial color=3Dblue size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-STYLE: italic; FONT-FAMILY: =
Arial">EADS=20
Astrium Limited, B32AA IM (DCS)</SPAN></FONT></I><SPAN=20
lang=3DEN-GB><BR></SPAN><EM><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: Arial">Anchorage=20
Road</SPAN></FONT></I></EM><EM><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN=20
lang=3DEN-GB style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">,=20
Portsmouth, PO3 5PU</SPAN></FONT></I></EM></P>
<P><EM><I><FONT face=3DArial color=3Dblue size=3D2><SPAN lang=3DEN-GB=20
style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: Arial">Email:=20
</SPAN></FONT></I></EM><SPAN lang=3DEN-GB><A=20
href=3D"mailto:Simon.Weaver AT Astrium-eads DOT net"><EM><I><FONT face=3DArial =
size=3D2><SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial">Simon.Weaver AT Astrium-eads DOT 
net</SPAN></FONT></I></EM></A></SPAN></P=
>
<BLOCKQUOTE style=3D"MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt; MARGIN-RIGHT: =
0cm">
  <P class=3DMsoNormal style=3D"MARGIN-BOTTOM: 12pt"><FONT face=3DTahoma =
size=3D2><SPAN=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">-----Original=20
  Message-----<BR><B><SPAN style=3D"FONT-WEIGHT: bold">From:</SPAN></B>=20
  Kilpatrick, Mark [mailto:mark.kilpatrick AT sabeo DOT com] <BR><B><SPAN=20
  style=3D"FONT-WEIGHT: bold">Sent:</SPAN></B> 21 April 2006 =
12:05<BR><B><SPAN=20
  style=3D"FONT-WEIGHT: bold">To:</SPAN></B>=20
  veritas-bu AT mailman.eng.auburn DOT edu<BR><B><SPAN=20
  style=3D"FONT-WEIGHT: bold">Subject:</SPAN></B> [Veritas-bu] backup of =
windows=20
  event logs</SPAN></FONT></P>
  <P class=3DMsoNormal style=3D"MARGIN-BOTTOM: 5pt"><FONT face=3DArial =
size=3D2><SPAN=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">I have just discovered =
that the=20
  windows event logs are not backed up as part of a All_Local_Drives =
backup. We=20
  were hoping to recover an event log that was deleted and there are no =
backups=20
  of these logs in the directory that they are located in on a windows =
server.=20
  There is no mention of a skipped file in the policy details for theses =

  clients. Is anyone aware of this and is it expected=20
  behaviour?</SPAN></FONT></P>
  <P class=3DMsoNormal style=3D"MARGIN-BOTTOM: 5pt"><FONT face=3DArial =
size=3D2><SPAN=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks, =
Mark</SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN=20
  style=3D"FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P>
  <P><FONT face=3D"Times New Roman" size=3D3><SPAN=20
  style=3D"FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></BLOCKQUOTE></DIV>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'"></SPAN>&nbsp;</P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'"></SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'"></SPAN>&nbsp;</P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'"></SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'"></SPAN>&nbsp;</P>
<P><SPAN=20
style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'">****************************************************************=
******</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'">This email and =
any files=20
transmitted with it are confidential and</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'">intended solely =
for the=20
use of the individual or entity to whom they</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'">are addressed. =
If you have=20
received this email in error please notify</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'">Sabeo=20
Technologies.</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'"></SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'"></SPAN>&nbsp;</P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Arial'">This footnote =
also=20
confirms that this email message has been swept for the presence of =
computer=20
viruses.</SPAN></P>
<P><SPAN=20
style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'">****************************************************************=
******</SPAN></P>
<P><SPAN style=3D"FONT-SIZE: 8pt; FONT-FAMILY: =
'Arial'"></SPAN>&nbsp;</P>
<TABLE>
  <TBODY>
  <TR>
    <TD bgColor=3D#ffffff><FONT color=3D#000000>This email is for the =
intended=20
      addressee only.<BR>If you have received it in error then you must =
not use,=20
      retain, disseminate or otherwise deal with it.<BR>Please notify =
the sender=20
      by return email.<BR>The views of the author may not necessarily =
constitute=20
      the views of EADS Astrium Limited.<BR>Nothing in this email shall =
bind=20
      EADS Astrium Limited in any contract or obligation.<BR><BR>EADS =
Astrium=20
      Limited, Registered in England and Wales No. 2449259<BR>Registered =
Office:=20
      Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS,=20
  England<BR></FONT></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0024_01C6654B.D3F81000--