Important Update: Cohesity Products Documentation
All Cohesity product documentation are now managed via the Cohesity Docs Portal: https://docs.cohesity.com/HomePage/Content/home.htm. Some documentation available here may not reflect the latest information or may no longer be accessible.
Arctera Insight Information Governance Administrator's Guide
- Section I. Getting started
- Introduction to Arctera Insight Information Governance administration
- Configuring Information Governance global settings
- About Information Governance licensing
- SQLite WAL mode
- Configuring SMTP server settings
- About scanning and event monitoring
- Monitoring Indexer Node Storage Utilization
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Information Governance integration with Data Loss Prevention (DLP)
- Importing sensitive files information through CSV
- Configuring advanced analytics
- About open shares
- About user risk score
- Configuring file groups
- Configuring Workspace data owner policy
- Configuring Management Console settings
- About bulk assignment of custodians
- Configuring Watchlist settings
- Configuring Metadata Framework
- Proof of concept
- Section II. Configuring Information Governance
- Configuring Information Governance product users
- Configuring Information Governance product servers
- About Information Governance product servers
- Adding a new Information Governance server
- Managing Information Governance product servers
- Viewing Information Governance server details
- About node templates
- Adding Portal role to a Information Governance server
- Adding Classification Server role to a Information Governance server
- Assigning Classification Server to a Collector
- Associating a Classification Server pool to a Collector
- Viewing in-progress scans
- Configuring Information Governance services
- Configuring advanced settings
- Monitoring Information Governance jobs
- Rotating the encryption keys
- Viewing Information Governance server statistics
- About automated alerts for patches and upgrades
- Deploying upgrades and patches remotely
- Using the Upload Manager utility
- About migrating storage devices across Indexers
- Viewing the status of a remote installation
- Configuring saved credentials
- Configuring directory service domains
- About directory domain scans
- Adding a directory service domain to Information Governance
- Managing directory service domains
- Fetching users and groups data from NIS+ scanner
- Configuring attributes for advanced analytics
- Deleting directory service domains
- Scheduling scans
- Configuring business unit mappings
- Importing additional attributes for users and user groups
- Configuring containers
- Server Pools
- Section III. Configuring native file systems in Information Governance
- Configuring clustered NetApp file server monitoring
- About configuring a clustered NetApp file server
- About configuring FPolicy in Cluster-Mode
- Pre-requisites for configuring clustered NetApp file servers
- Credentials required for configuring a clustered NetApp file server
- Preparing a non-administrator local user on the clustered NetApp filer
- Preparing a non-administrator domain user on a NetApp cluster for Information Governance
- Persistent Store
- Preparing Information Governance for FPolicy in NetApp Cluster-Mode
- Preparing the ONTAP cluster for FPolicy
- About configuring secure communication between Information Governance and cluster-mode NetApp devices
- Enabling export of NFS shares on a NetApp Cluster-Mode file server
- Enabling SSL support for Cluster Mode NetApp auditing
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- About configuring EMC Isilon filers
- Prerequisites for configuration of Isilon or Unity VSA file server monitoring
- Credentials required for configuring an EMC Isilon cluster
- Configuring audit settings on EMC Isilon cluster using OneFS GUI console
- Configuring audit settings on EMC Isilon cluster using the OneFS CLI
- Configuring Isilon audit settings for performance improvement
- Preparing Arctera Insight Information Governance to receive event notifications from an EMC Isilon or Unity VSA cluster
- Creating a non-administrator user for an EMC Isilon cluster
- Utilizing access zone's SmartConnect Zone/Alias mappings
- Purging the audit logs in an Isilon filer
- Configuring EMC Unity VSA file servers
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Arctera File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- About configuring filers
- Viewing configured filers
- Adding filers
- Add/Edit NetApp cluster file server options
- Add/Edit EMC Celerra filer options
- Add/Edit EMC Isilon file server options
- Add/Edit EMC Unity VSA file server options
- Add/Edit Windows File Server options
- Add/Edit Arctera File System server options
- Add/Edit a generic storage device options
- Add/Edit Hitachi NAS file server options
- Custom schedule options
- Editing filer configuration
- Deleting filers
- Viewing performance statistics for file servers
- About disabled shares
- Adding shares
- Managing shares
- Editing share configuration
- Deleting shares
- About configuring a DFS target
- Adding a configuration attribute for devices
- Configuring a DFS target
- About the DFS utility
- Running the DFS utility
- Importing DFS mapping
- Renaming storage devices
- Configuring clustered NetApp file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About SharePoint server monitoring
- Credentials required for configuring SharePoint servers
- Configuring a web application policy
- About the Information Governance web service for SharePoint
- Viewing configured SharePoint data sources
- Adding web applications
- Editing web applications
- Deleting web applications
- Adding site collections
- Managing site collections
- Removing a configured web application
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Configuring user with minimum privileges in Microsoft 365
- Creating an application in the Microsoft Azure portal
- Configuring application without user impersonation for Microsoft 365
- Adding SharePoint Online accounts
- Managing a SharePoint Online account
- Adding site collections to SharePoint Online accounts
- Managing site collections
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Configuring monitoring of Box accounts
- Configuring OneDrive account monitoring
- Configuring Azure Netapp Files Device
- Managing cloud sources
- Section VI. Configuring Object Storage Sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Configuring policies
- About Information Governance policies
- Managing policies
- Create Data Activity Trigger policy options
- Create User Activity Deviation policy options
- Create Real-time Data Activity Policy options
- Create Real-time Permitted User-based Activity Policy options
- Create Real-time Restricted User-based Activity Policy options
- Create Real-time Sensitive Data Activity policy options
- Managing alerts
- Configuring policies
- Section IX. Remediation
- Configuring remediation settings
- Section X. Reference
- Appendix A. Information Governance best practices
- Appendix B. Migrating Information Governance components
- Appendix C. Backing up and restoring data
- Appendix D. Arctera Information Governance health checks
- About Information Governance health checks
- Services checks
- Deployment details checks
- Generic checks
- Information Governance Management Server checks
- Information Governance Indexer checks
- Information Governance Collector checks
- Information Governance Windows File Server checks
- Information Governance SharePoint checks
- Classification server health checks
- Information Governance self service portal server health checks
- About Information Governance health checks
- Appendix E. Command File Reference
- Appendix F. Arctera Information Governance jobs
- Appendix G. Troubleshooting
- About general troubleshooting procedures
- About the Health Audit report
- Location of Information Governance logs
- Downloading Information Governance logs
- Migrating the data directory to a new location
- Troubleshooting FPolicy issues on NetApp devices
- Troubleshooting EMC Celera or VNX configuration issues
- Troubleshooting EMC Isilon configuration issues
- Troubleshooting SharePoint configuration issues
- Troubleshooting Hitachi NAS configuration issues
- Troubleshooting installation of Tesseract software
- Troubleshooting RHEL 9 upgrade issue
- Troubleshooting CyberArk Password Manager Configuration Issues
About deleting files
Information Governance provides the ability to delete unwanted files from CIFS devices and M365 cloud data sources. Currently, supported M365 cloud data sources are SharePoint Online and OneDrive. You can delete old and inactive files, and the folders holding those files, from the Workspace and Reports tab in the Information Governance Management console.
To configure Delete action for CIFS devices,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to CIFS Delete Configuration section.
- If you want Delete Files action to be available in Workspace and Reports tab, check the Enable delete files action box.
- Check the Delete Empty Folder box to deletes empty folders.
- In the Devices for action field, enter comma separated device names or patterns. For example 10.209.89.1,10.209.89.2, 10.209.90.*
- In the File count field, add number of files you want to delete in a single delete request.
- You can select either User scan credentials or Select user in the Run As field. If your choice is Select user, make sure the selected user has access to the filer or you can create new user by clicking Add new from the drop-down and providing required details.
- In the Run Delete Action On field, select the option where you want to run delete files, either Management Server or Collector
- Click OK to save.
After configuring delete action, you can View or Edit existing delete action configuration.
Note:
If you are using supporting hybrid SVM alias functionality and then add alias SVM with CIFS monitoring, you need to resolve alias name in the host entry to support delete action on that aliased SVM. For example: CIFS_LIF_IP NETAPPSV NETAPPSV_aliased
Note:
Delete action will run only on the Collector node for M365 data sources. Proxy mode for M365 data sources is also supported.
To configure Delete action for SharePoint Online Account,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to M365 Sources section.
- Click Configure Delete Action drop-down.
- Select SharePoint Online Account.
- Select SharePoint Online Account URL from the drop-down.
- Enable Delete Files Action checkbox will be checked by default. Uncheck this box if you want to create a delete action configuration but intend keep it disabled. You can check the box later to enable this delete action.
- Check Delete Empty Folder checkbox to delete empty folders.
- If you want to exclude any sites from delete action, click Select Sites.
- Check the box next to the site that you want to exclude and click Save.
- In the File count field, add number of files you want to delete in a single delete request.
- Select the credentials that you want to use from the Client Credentials drop-down. You can add new client credentials by clicking Add new from the drop-down and providing required details and completing authorization. Refer To create and register an application with Microsoft from the following section for more details:
See Registering Information Governance with Microsoft to scan Azure AD.
- Click Re-authorize and complete authorization for selected credentials. Re-authorization is mandatory only for the existing client credentials.
- Click Save to complete the process.
To configure Delete action for Microsoft OneDrive Account,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to M365 Sources section.
- Click Configure Delete Action drop-down.
- Select Microsoft OneDrive Account.
- Select Microsoft OneDrive Account Name from the drop-down.
- Enable Delete Files Action checkbox will be checked by default. Uncheck this box if you want to create a delete action configuration but intend keep it disabled. You can check the box later to enable this delete action.
- Check Delete Empty Folder checkbox to deletes empty folders.
- In the File count field, add number of files you want to delete in a single delete request.
- Select the credentials that you want to use from the Client Credentials drop-down. You can add new client credentials by clicking Add new from the drop-down and providing required details and completing authorization. Refer To create and register an application with Microsoft from the following section for more details:
See Registering Information Governance with Microsoft to scan Azure AD.
- Click Re-authorize and complete authorization for selected credentials. Re-authorization is mandatory only for existing client credentials.
- Click Save to complete the process.
For M365 data sources, you need following application permissions in addition to the existing permissions:
API | Permission name |
|---|---|
Microsoft Graph | Files.ReadWrite.All |
SharePoint | Sites.ReadWrite.All |
After configuring delete action , you can View, Edit, Disable, and Delete existing delete action configuration. You can add up to 5 Client IDs for both devices.
If you edit the existing delete action, you need to re-authorize all application permissions.
For M365 data sources, delete action is not supported for Inactive SubFolders listed under Folder Activity in the Workspace tab.