Unusual File Activity Report for Backup Job Anomalies

Updated

The Unusual file activity report for backup job anomalies is a preview of unusual job activity in the backup jobs for all the clients that have 11.23 or a more recent feature release. You can use this report to track unusual job activity in the backup jobs when the number of created, deleted, or modified files in a backup job changes abruptly from the normal behavior, or when the total backed up root size increases or decreases, in the CommCell environment.

The anomaly thresholds are based on historical activity and machine-learning algorithms to help reduce false positives from typical activity on the file system.

Backup jobs on the client computer are monitored and analyzed to establish a base line of job activities, and alerts and events are sent to the administrator when an abnormal number of file operations is detected.

The following options are available in the upper-right corner of the page:

  • To remove a client that has unusual job activity from the client list in the table section, click Clear anomaly.

  • To recover a client that has unusual job activity, as a VM, click Recover as VM.

    The data prior to the backup job anomaly is recovered.

  • To restore a file from a client that has unusual job activity, click Recover files.

    The data before the backup job anomaly is recovered.

Report Description

The Unusual file activity report for backup job anomalies is divided into the following sections: Unusual file activity chart and Unusual file activity table.

Unusual File Activity Chart

This chart displays the distribution of the number of files in a backup job based on the unusual behavior that is observed in creation, modification, and deletion operations, in the CommCell environment.

The following image is an example of the unusual file activity for backup job anomalies chart view:

Unusual File Activity Table

The following table includes descriptions for all the columns in the Unusual file activity table for backup job anomalies.

Column

Description

Path

The path to the folder that contains the files that are affected by the anomalous activity.

Job ID

The identifier of the backup job that has the anomaly.

Detected time

The time when the anomaly was detected.

Actions

To restore a path that has unusual job activity from the folder path list, click the action button , and then click Restore path.

Performing File System Restores