Veritas Data Insight Administrator's Guide
- Section I. Getting started
- Introduction to Veritas Data Insight administration
- Configuring Data Insight global settings
- Overview of Data Insight licensing
- Configuring SMTP server settings
- About scanning and event monitoring
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Data Insight integration with Symantec Data Loss Prevention (DLP)
- Importing sensitive files information through CSV
- Configuring advanced analytics
- About open shares
- Configuring file groups
- Configuring Workspace data owner policy
- Configuring Management Console settings
- About bulk assignment of custodians
- Configuring Watchlist settings
- Section II. Configuring Data Insight
- Configuring Data Insight product users
- Configuring Data Insight product servers
- About Data Insight product servers
- Adding a new Data Insight server
- Managing Data Insight product servers
- Viewing Data Insight server details
- About node templates
- Adding Portal role to a Data Insight server
- Adding Classification Server role to a Data Insight server
- Assigning Classification Server to a Collector
- Associating a Classification Server pool to a Collector
- Viewing in-progress scans
- Configuring Data Insight services
- Configuring advanced settings
- Monitoring Data Insight jobs
- Rotating the encryption keys
- Viewing Data Insight server statistics
- About automated alerts for patches and upgrades
- Deploying upgrades and patches remotely
- Using the Upload Manager utility
- About migrating storage devices across Indexers
- Viewing the status of a remote installation
- Configuring saved credentials
- Configuring directory service domains
- Configuring containers
- Section III. Configuring native file systems in Data Insight
- Configuring NetApp file server monitoring
- About configuring NetApp file server monitoring
- Prerequisites for configuring NetApp file servers
- Credentials required for configuring NetApp filers
- Credentials required for configuring NetApp NFS filers
- Configuring SMB signing
- About FPolicy
- Preparing Data Insight for FPolicy
- Preparing the NetApp filer for Fpolicy
- Preparing the NetApp vfiler for Fpolicy
- Configuring NetApp audit settings for performance improvement
- Preparing a non-administrator domain user on the NetApp filer for Data Insight
- Enabling export of NFS shares on a NetApp file server
- Excluding volumes on a NetApp file server
- Handling NetApp home directories in Data Insight
- Configuring clustered NetApp file server monitoring
- About configuring a clustered NetApp file server
- About configuring FPolicy in Cluster-Mode
- Pre-requisites for configuring clustered NetApp file servers
- Credentials required for configuring a clustered NetApp file server
- Preparing a non-administrator local user on the clustered NetApp filer
- Preparing a non-administrator domain user on a NetApp cluster for Data Insight
- Preparing Data Insight for FPolicy in NetApp Cluster-Mode
- Preparing the ONTAP cluster for FPolicy
- About configuring secure communication between Data Insight and cluster-mode NetApp devices
- Enabling export of NFS shares on a NetApp Cluster-Mode file server
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- About configuring EMC Isilon filers
- Prerequisites for configuration of Isilon or Unity VSA file server monitoring
- Credentials required for configuring an EMC Isilon cluster
- Configuring audit settings on EMC Isilon cluster using OneFS GUI console
- Configuring audit settings on EMC Isilon cluster using the OneFS CLI
- Configuring Isilon audit settings for performance improvement
- Preparing Veritas Data Insight to receive event notifications from an EMC Isilon or Unity VSA cluster
- Creating a non-administrator user for an EMC Isilon cluster
- Using SmartConnect mapping for access zones
- Purging the audit logs in an Isilon filer
- Configuring EMC Unity VSA file servers
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Veritas File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- About configuring filers
- Viewing configured filers
- Adding filers
- Add/Edit NetApp filer options
- Add/Edit NetApp cluster file server options
- Add/Edit EMC Celerra filer options
- Add/Edit EMC Isilon file server options
- Add/Edit EMC Unity VSA file server options
- Add/Edit Windows File Server options
- Add/Edit Veritas File System server options
- Add/Edit a generic storage device options
- Add/Edit Hitachi NAS file server options
- Custom schedule options
- Editing filer configuration
- Deleting filers
- Viewing performance statistics for file servers
- About disabled shares
- Adding shares
- Managing shares
- Editing share configuration
- Deleting shares
- About configuring a DFS target
- Adding a configuration attribute for devices
- Configuring a DFS target
- About the DFS utility
- Running the DFS utility
- Importing DFS mapping
- Renaming storage devices
- Configuring NetApp file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About SharePoint server monitoring
- Credentials required for configuring SharePoint servers
- Configuring a web application policy
- About the Data Insight web service for SharePoint
- Adding web applications
- Editing web applications
- Deleting web applications
- Adding site collections
- Managing site collections
- Removing a configured web application
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Registering Data Insight with Microsoft to enable SharePoint Online account monitoring
- Configuring an administrator account for Data Insight
- Adding SharePoint Online accounts
- Managing a SharePoint Online account
- Adding site collections to SharePoint Online accounts
- Managing site collections
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Section VI. Configuring ECM data sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Section IX. Remediation
- Section X. Reference
- Appendix A. Backing up and restoring data
- Appendix B. Data Insight health checks
- Appendix C. Command File Reference
- Appendix D. Data Insight jobs
- Appendix E. Troubleshooting
- About general troubleshooting procedures
- About the Health Audit report
- Location of Data Insight logs
- Downloading Data Insight logs
- Migrating the data directory to a new location
- Troubleshooting FPolicy issues on NetApp devices
- Troubleshooting EMC Celera or VNX configuration issues
- Troubleshooting EMC Isilon configuration issues
- Troubleshooting SharePoint configuration issues
- Troubleshooting Hitachi NAS configuration issues
- Troubleshooting installation of Tesseract software
- Index
Overview of Data Insight licensing
You must install a license key file that covers the Data Insight features that you want to implement. To use all Data Insight functionality, you must have the following licenses:
Data Insight base license - The base product license enables you to access basic product features including viewing audit and scan data, reports, classifying content, and adding resources such as filers and SharePoint web applications.
The Data Insight base license is available in two types - based on the number of users and based on the amount of storage that is monitored by Data Insight. When the storage limit-based license is applied, Data Insight computes the total storage that it monitors on filers, generic devices, Documentum devices, and SharePoint servers. It also includes the storage space that is occupied by disabled shares. However, it does not include the storage monitored on DFS paths and cloud storage resources such as Box.
For paths on generic devices, Data Insight considers the storage occupied by parent and child shares independently. This behavior is observed because for generic devices, Data Insight is not able to distinguish between the physical and the logical paths. As a result, during the computation of the total storage capacity, Data Insight considers the nested storage as independent storage.
Self-Service Portal license - A separate add-on license is needed if you want to create workflow templates and workflows. The Self-Service Portal license enables you to access the portal to take action on remediation workflows. You will also not be able to access the Self-Service Portal until valid base and portal licenses are applied.
Data Insight cloud license - The cloud license is an add-on license that enables you to monitor data sources residing within the cloud environment, such as Box, SharePoint Online, and OneDrive. The cloud license is granted based on the number of users for your cloud accounts.
A valid cloud license lets you add cloud sources for monitoring, discovering and scanning data, and viewing the audit and metadata information.
If you do not have a valid base license or when the license expires, the software continues to run in a restricted mode. The following functionality is disabled on the Management Console:
The Workspace, Policies, and Reports tab are hidden on the Management Console. Only the Workflows and Settings tabs are visible on the UI. However, you will not be able to take any remediation actions from the > page.
The options on the console to add new filers, shares, SharePoint web applications, SharePoint Online accounts, site collections, repositories, cloud storage resources, and directory services are disabled. However, Data Insight lets you edit properties of the resources that are already configured in Data Insight.
Auto-discovery does not result in discovering new shares, site collections, OneDrive user accounts, Documentum repositories, or equivalents that are created on storage device, filer, or web application if the license on the Data Insight system is not valid.
Creation of workflow templates and workflows is disabled, even if portal license is valid but the base license has expired.
Ability to add cloud data sources is disabled even if the cloud license is valid but the base license has expired.
Until Data Insight 5.0.x, the product functionality operates on Trust and Verify model. A message in the footer indicates whether the base as well as Self-Service portal license has expired, but product features are fully functional if the license has expired or in the absence of a valid license.
Note that if the portal license is not valid:
When you click > , > , or for the first time, a pop-up is displayed in the bottom right corner indicating that a valid Self-Service Portal license must be applied to use the feature.
The options to add workflow templates and workflows are disabled.
Custodians for a workflow continue to receive reminder emails for existing workflows. However, when you click the portal link in the email, they see a message indicating that the license has expired and must be renewed.
The footer of the reminder email contains a message indicating that the license has expired.
Depending on the state of the license, the following warnings and errors are displayed in the footer of the Management Console:
In case of a license in grace period, the footer shows an icon and message indicating that the license has expired and is in grace period. On clicking the footer, a detailed message indicating the number of grace days and the fact that features will be disabled after expiry is displayed. Additionally, a Data Insight event is raised daily at the WARNING level indicating that the license is in grace period.
After the grace period ends, a warning period will then be in effect until the license completely expires.
In case of a license in warning period, Data Insight displays an icon and a message indicating that the license is in the warning period and is due to expire in a certain number of days. The Licensing team configures the warning period. Click the footer icon or message to view the detailed message. Additionally, a Data Insight event is raised daily at the INFO level indicating that a warn policy is in effect for the license.
On license expiry, the footer displays the message indicating that the license has expired. On clicking the message, a detailed message is displayed indicating that some of the features are disabled. Additionally, a Data Insight event is raised daily at the CRITICAL level stating that the license has expired.
After the license expires, certain functionality is disabled and the application runs in a restricted mode.
In case of a storage limit-based license, if the storage monitored by Data Insight exceeds the licensed limit then the footer displays a warning message indicating that the storage monitored by Data Insight has exceeded. However, Data Insight continues to function with uninterrupted access to all functionality. Click the footer message to view the detailed message.
In case of a cloud license, if the cloud license is expired then the ability to add new cloud data sources such as SharePoint Online and Box for monitoring and to add shares or their equivalent data containers is disabled until the license is renewed. However, Data Insight continues to monitor the existing data sources without any interruption. To view the detailed message, click the footer message.
In case of multiple error conditions, the error message pop-up populates the messages based on their severity status.
For more information about licenses, contact your Licensing team.