Arctera Data Insight Administrator's Guide
- Section I. Getting started
- Introduction to Arctera Data Insight administration
- Configuring Data Insight global settings
- About Data Insight licensing
- SQLite WAL mode
- Configuring SMTP server settings
- About scanning and event monitoring
- Monitoring Indexer Node Storage Utilization
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Data Insight integration with Data Loss Prevention (DLP)
- Importing sensitive files information through CSV
- Configuring advanced analytics
- About open shares
- About user risk score
- Configuring file groups
- Configuring Workspace data owner policy
- Configuring Management Console settings
- About bulk assignment of custodians
- Configuring Watchlist settings
- Configuring Metadata Framework
- Proof of concept
- Section II. Configuring Data Insight
- Configuring Data Insight product users
- Configuring Data Insight product servers
- About Data Insight product servers
- Adding a new Data Insight server
- Managing Data Insight product servers
- Viewing Data Insight server details
- About node templates
- Adding Portal role to a Data Insight server
- Adding Classification Server role to a Data Insight server
- Assigning Classification Server to a Collector
- Associating a Classification Server pool to a Collector
- Viewing in-progress scans
- Configuring Data Insight services
- Configuring advanced settings
- Monitoring Data Insight jobs
- Rotating the encryption keys
- Viewing Data Insight server statistics
- About automated alerts for patches and upgrades
- Deploying upgrades and patches remotely
- Using the Upload Manager utility
- About migrating storage devices across Indexers
- Viewing the status of a remote installation
- Configuring saved credentials
- Configuring directory service domains
- About directory domain scans
- Adding a directory service domain to Data Insight
- Managing directory service domains
- Fetching users and groups data from NIS+ scanner
- Configuring attributes for advanced analytics
- Deleting directory service domains
- Scheduling scans
- Configuring business unit mappings
- Importing additional attributes for users and user groups
- Configuring containers
- Section III. Configuring native file systems in Data Insight
- Configuring NetApp 7-mode file server monitoring
- About configuring NetApp file server monitoring
- Prerequisites for configuring NetApp file servers
- Credentials required for configuring NetApp filers
- Credentials required for configuring NetApp NFS filers
- Configuring SMB signing
- About FPolicy
- Preparing Data Insight for FPolicy
- Preparing the NetApp filer for Fpolicy
- Preparing the NetApp vfiler for Fpolicy
- Configuring NetApp audit settings for performance improvement
- Preparing a non-administrator domain user on the NetApp filer for Data Insight
- Enabling export of NFS shares on a NetApp file server
- Excluding volumes on a NetApp file server
- Handling NetApp home directories in Data Insight
- Configuring clustered NetApp file server monitoring
- About configuring a clustered NetApp file server
- About configuring FPolicy in Cluster-Mode
- Pre-requisites for configuring clustered NetApp file servers
- Credentials required for configuring a clustered NetApp file server
- Preparing a non-administrator local user on the clustered NetApp filer
- Preparing a non-administrator domain user on a NetApp cluster for Data Insight
- Persistent Store
- Preparing Data Insight for FPolicy in NetApp Cluster-Mode
- Preparing the ONTAP cluster for FPolicy
- About configuring secure communication between Data Insight and cluster-mode NetApp devices
- Enabling export of NFS shares on a NetApp Cluster-Mode file server
- Enabling SSL support for Cluster Mode NetApp auditing
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- About configuring EMC Isilon filers
- Prerequisites for configuration of Isilon or Unity VSA file server monitoring
- Credentials required for configuring an EMC Isilon cluster
- Configuring audit settings on EMC Isilon cluster using OneFS GUI console
- Configuring audit settings on EMC Isilon cluster using the OneFS CLI
- Configuring Isilon audit settings for performance improvement
- Preparing Arctera Data Insight to receive event notifications from an EMC Isilon or Unity VSA cluster
- Creating a non-administrator user for an EMC Isilon cluster
- Utilizing access zone's SmartConnect Zone/Alias mappings
- Purging the audit logs in an Isilon filer
- Configuring EMC Unity VSA file servers
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Veritas File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- About configuring filers
- Viewing configured filers
- Adding filers
- Add/Edit NetApp filer options
- Add/Edit NetApp cluster file server options
- Add/Edit EMC Celerra filer options
- Add/Edit EMC Isilon file server options
- Add/Edit EMC Unity VSA file server options
- Add/Edit Windows File Server options
- Add/Edit Veritas File System server options
- Add/Edit a generic storage device options
- Add/Edit Hitachi NAS file server options
- Custom schedule options
- Editing filer configuration
- Deleting filers
- Viewing performance statistics for file servers
- About disabled shares
- Adding shares
- Managing shares
- Editing share configuration
- Deleting shares
- About configuring a DFS target
- Adding a configuration attribute for devices
- Configuring a DFS target
- About the DFS utility
- Running the DFS utility
- Importing DFS mapping
- Renaming storage devices
- Configuring NetApp 7-mode file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About SharePoint server monitoring
- Credentials required for configuring SharePoint servers
- Configuring a web application policy
- About the Data Insight web service for SharePoint
- Viewing configured SharePoint data sources
- Adding web applications
- Editing web applications
- Deleting web applications
- Adding site collections
- Managing site collections
- Removing a configured web application
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Configuring user with minimum privileges in Microsoft 365
- Creating an application in the Microsoft Azure portal
- Configuring application without user impersonation for Microsoft 365
- Adding SharePoint Online accounts
- Managing a SharePoint Online account
- Adding site collections to SharePoint Online accounts
- Managing site collections
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Configuring monitoring of Box accounts
- Configuring OneDrive account monitoring
- Configuring Azure Netapp Files Device
- Managing cloud sources
- Section VI. Configuring Object Storage Sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Section IX. Remediation
- Configuring remediation settings
- Section X. Reference
- Appendix A. Data Insight best practices
- Appendix B. Migrating Data Insight components
- Appendix C. Backing up and restoring data
- Appendix D. Data Insight health checks
- About Data Insight health checks
- Services checks
- Deployment details checks
- Generic checks
- Data Insight Management Server checks
- Data Insight Indexer checks
- Data Insight Collector checks
- Data Insight Windows File Server checks
- Data Insight SharePoint checks
- Classification server health checks
- Data Insight self service portal server health checks
- About Data Insight health checks
- Appendix E. Command File Reference
- Appendix F. Data Insight jobs
- Appendix G. Troubleshooting
- About general troubleshooting procedures
- About the Health Audit report
- Location of Data Insight logs
- Downloading Data Insight logs
- Migrating the data directory to a new location
- Troubleshooting FPolicy issues on NetApp devices
- Troubleshooting EMC Celera or VNX configuration issues
- Troubleshooting EMC Isilon configuration issues
- Troubleshooting SharePoint configuration issues
- Troubleshooting Hitachi NAS configuration issues
- Troubleshooting installation of Tesseract software
- Troubleshooting RHEL 9 upgrade issue
Managing shares
On the Monitored Shares details page you can view the detailed information about configured shares and run a customized scan on the configured shares.
Use the provided dynamic search filter to search for configured shares based on the name of the share.
To view configured shares
- In the Console, click Settings > Filers.
- Click the filer on which the share resides.
- On the Filer Detail screen, click Monitored Shares.
Review the following information about the shares:
ID of the share. The ID is required during troubleshooting. This column is hidden by default.
The name of the share.
If this share belongs to a clustered filer, then the name should appear as fileserver@share, where, fileserver is the name of the file server within the cluster that hosts the share.
Type of this share, CIFS or NFS.
Enabled status of this share. This column is hidden by default.
Legal hold status for this share. This column is hidden by default.
The number of parallel scan threads running on the share. This column is hidden by default.
The scanning schedule for the share. This column is hidden by default.
The date and time of the last full scan of the share.
The date and time of the last incremental scan.
Incremental scans are scans of the file system that includes only those paths that have changed since the last full scan. Incremental scans are much faster than full scans and they take place once every night at 7:00 P.M. You can configure incremental scans on the Settings > Data Insight Servers > Advanced Settings page.
The time this share's index was last updated with scan information.
After every scan, the index is updated with information about the changes to the folder hierarchy on a share. This indicates whether the last update was successful or failed. It also indicates the number of scan files pending for this share on the Indexer and the number of files that failed to be indexed. Such files are present in the
$data/indexer/errfolder on the Indexer. If there are failed files on the Indexer, you can move them from theerrfolder to$data/inboxfolder and attempt a full scan of the share. If the information fails to be indexed again, contact Veritas Support.The time this share's index was last updated with access event information.
As new access events come in, the index for the share is periodically updated with information about the new access events. This indicates whether the last update was successful or had failed. It also indicates the number of audit files pending for this share on the Indexer and the number of files that failed to be indexed. Such files are present in the
$data/indexer/errfolder on the Indexer. If there are failed files on the Indexer, you can move them to the$data/inboxfolder on the Indexer. If they fail to be indexed again, contact Veritas Support.The status of event monitoring for the share, whether enabled or disabled.
Whether a legal hold is being enforced for the share. You can choose to prevent access information for a share from being archived or deleted by putting a legal hold on the share. Data Insight preserves the access events information for such shares indefinitely.
- Click the Export icon at the bottom of the page to save the data on the Monitored Shares panel to a
.csvfile.
Note:
If a volume is shared via SMB/CIFS and a share is pointing to the same volume, both volume and share are discovered in Data Insight and will have duplicate data.
You can also add a new share, edit the share's configuration, delete the share, start an unscheduled scan for a share, view the scan status, and download Data Insight logs from this page.
To view the scan status of a share
- In the Console, click Settings > Filers.
- Click the filer on which the share resides.
- On the Filer Detail screen, click Monitored Shares.
- Click the consolidated status icon to view the summary of the scan or the scan history of the share.
Or select Select Action drop-down for the corresponding share, and select Scan Status.
The consolidated status of the scans on the share appears. Click the Scan History tab on the pop-up to view the following details
The start and end time of the scan.
The time taken for the scan.
The type of scan, whether full or incremental.
The Collector node associated with the share.
The details of the scan. For example, if a scan has failed, the Details column indicates the exit code for the error message.
The user account that initiated the scan.
You can also view the scan status for a share from the sub-tab of the Scanning dashboard.
To view events pertaining to a share
- In the Console, click Settings > Filers.
- Click the filer on which the share resides.
- On the filer details screen, click Monitored Shares.
- Click the Action drop-down for the corresponding share, and select Event Log.
The event log for that share appears.
- To download the Data Insight logs for the share, click the Select Action drop-down for the corresponding share, and select Download Log.
Data Insight downloads a compressed folder containing logs for this share from all relevant Data Insight servers.
To scan one or more shares in a batch
- On the Monitored Shares tab, select a share, and select Scan from the Select Action drop down corresponding to a share.
Note:
The Scan option is not available for shares that have been disabled.
- To scan multiple share, select one or more shares using the check boxes.
- Click Scan, and select Scan Selected Records.
Optionally, filter shares as needed using the filters available on the page. Click Scan, and select Scan Filtered Records.
Note:
You can use a command line utility, scancli.exe, to further customize the scan, view the scan jobs running on a specified node, or display the scan status for specified shares. See scancli.exe. You can also use the Scanning dashboard view to scan shares and site collections based on more granular criteria.
To enable or disable shares
- In the Management Console, click Settings > Filers.
- Click the filer on which the share resides.
- On the filer detail screen, click Monitored Shares.
- To enable or disable a share, do one of the following:
Select the share(s) and click Enable Shares or Disable Shares, as the case may be. You can select multiple shares and enable or disable them at once.
Or, click the Action drop-down corresponding to a share, and select Enable or Disable, as the case may be.