Important Update: Cohesity Products Documentation
All Cohesity product documentation are now managed via the Cohesity Docs Portal: https://docs.cohesity.com/HomePage/Content/home.htm. Some documentation available here may not reflect the latest information or may no longer be accessible.
Arctera Insight Information Governance Administrator's Guide
- Section I. Getting started
- Introduction to Arctera Insight Information Governance administration
- Configuring Information Governance global settings
- About Information Governance licensing
- SQLite WAL mode
- Configuring SMTP server settings
- About scanning and event monitoring
- Monitoring Indexer Node Storage Utilization
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Information Governance integration with Data Loss Prevention (DLP)
- Importing sensitive files information through CSV
- Configuring advanced analytics
- About open shares
- About user risk score
- Configuring file groups
- Configuring Workspace data owner policy
- Configuring Management Console settings
- About bulk assignment of custodians
- Configuring Watchlist settings
- Configuring Metadata Framework
- Proof of concept
- Section II. Configuring Information Governance
- Configuring Information Governance product users
- Configuring Information Governance product servers
- About Information Governance product servers
- Adding a new Information Governance server
- Managing Information Governance product servers
- Viewing Information Governance server details
- About node templates
- Adding Portal role to a Information Governance server
- Adding Classification Server role to a Information Governance server
- Assigning Classification Server to a Collector
- Associating a Classification Server pool to a Collector
- Viewing in-progress scans
- Configuring Information Governance services
- Configuring advanced settings
- Monitoring Information Governance jobs
- Rotating the encryption keys
- Viewing Information Governance server statistics
- About automated alerts for patches and upgrades
- Deploying upgrades and patches remotely
- Using the Upload Manager utility
- About migrating storage devices across Indexers
- Viewing the status of a remote installation
- Configuring saved credentials
- Configuring directory service domains
- About directory domain scans
- Adding a directory service domain to Information Governance
- Managing directory service domains
- Fetching users and groups data from NIS+ scanner
- Configuring attributes for advanced analytics
- Deleting directory service domains
- Scheduling scans
- Configuring business unit mappings
- Importing additional attributes for users and user groups
- Configuring containers
- Server Pools
- Section III. Configuring native file systems in Information Governance
- Configuring clustered NetApp file server monitoring
- About configuring a clustered NetApp file server
- About configuring FPolicy in Cluster-Mode
- Pre-requisites for configuring clustered NetApp file servers
- Credentials required for configuring a clustered NetApp file server
- Preparing a non-administrator local user on the clustered NetApp filer
- Preparing a non-administrator domain user on a NetApp cluster for Information Governance
- Persistent Store
- Preparing Information Governance for FPolicy in NetApp Cluster-Mode
- Preparing the ONTAP cluster for FPolicy
- About configuring secure communication between Information Governance and cluster-mode NetApp devices
- Enabling export of NFS shares on a NetApp Cluster-Mode file server
- Enabling SSL support for Cluster Mode NetApp auditing
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- About configuring EMC Isilon filers
- Prerequisites for configuration of Isilon or Unity VSA file server monitoring
- Credentials required for configuring an EMC Isilon cluster
- Configuring audit settings on EMC Isilon cluster using OneFS GUI console
- Configuring audit settings on EMC Isilon cluster using the OneFS CLI
- Configuring Isilon audit settings for performance improvement
- Preparing Arctera Insight Information Governance to receive event notifications from an EMC Isilon or Unity VSA cluster
- Creating a non-administrator user for an EMC Isilon cluster
- Utilizing access zone's SmartConnect Zone/Alias mappings
- Purging the audit logs in an Isilon filer
- Configuring EMC Unity VSA file servers
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Arctera File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- About configuring filers
- Viewing configured filers
- Adding filers
- Add/Edit NetApp cluster file server options
- Add/Edit EMC Celerra filer options
- Add/Edit EMC Isilon file server options
- Add/Edit EMC Unity VSA file server options
- Add/Edit Windows File Server options
- Add/Edit Arctera File System server options
- Add/Edit a generic storage device options
- Add/Edit Hitachi NAS file server options
- Custom schedule options
- Editing filer configuration
- Deleting filers
- Viewing performance statistics for file servers
- About disabled shares
- Adding shares
- Managing shares
- Editing share configuration
- Deleting shares
- About configuring a DFS target
- Adding a configuration attribute for devices
- Configuring a DFS target
- About the DFS utility
- Running the DFS utility
- Importing DFS mapping
- Renaming storage devices
- Configuring clustered NetApp file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About SharePoint server monitoring
- Credentials required for configuring SharePoint servers
- Configuring a web application policy
- About the Information Governance web service for SharePoint
- Viewing configured SharePoint data sources
- Adding web applications
- Editing web applications
- Deleting web applications
- Adding site collections
- Managing site collections
- Removing a configured web application
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Configuring user with minimum privileges in Microsoft 365
- Creating an application in the Microsoft Azure portal
- Configuring application without user impersonation for Microsoft 365
- Adding SharePoint Online accounts
- Managing a SharePoint Online account
- Adding site collections to SharePoint Online accounts
- Managing site collections
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Configuring monitoring of Box accounts
- Configuring OneDrive account monitoring
- Configuring Azure Netapp Files Device
- Managing cloud sources
- Section VI. Configuring Object Storage Sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Configuring policies
- About Information Governance policies
- Managing policies
- Create Data Activity Trigger policy options
- Create User Activity Deviation policy options
- Create Real-time Data Activity Policy options
- Create Real-time Permitted User-based Activity Policy options
- Create Real-time Restricted User-based Activity Policy options
- Create Real-time Sensitive Data Activity policy options
- Managing alerts
- Configuring policies
- Section IX. Remediation
- Configuring remediation settings
- Section X. Reference
- Appendix A. Information Governance best practices
- Appendix B. Migrating Information Governance components
- Appendix C. Backing up and restoring data
- Appendix D. Arctera Information Governance health checks
- About Information Governance health checks
- Services checks
- Deployment details checks
- Generic checks
- Information Governance Management Server checks
- Information Governance Indexer checks
- Information Governance Collector checks
- Information Governance Windows File Server checks
- Information Governance SharePoint checks
- Classification server health checks
- Information Governance self service portal server health checks
- About Information Governance health checks
- Appendix E. Command File Reference
- Appendix F. Arctera Information Governance jobs
- Appendix G. Troubleshooting
- About general troubleshooting procedures
- About the Health Audit report
- Location of Information Governance logs
- Downloading Information Governance logs
- Migrating the data directory to a new location
- Troubleshooting FPolicy issues on NetApp devices
- Troubleshooting EMC Celera or VNX configuration issues
- Troubleshooting EMC Isilon configuration issues
- Troubleshooting SharePoint configuration issues
- Troubleshooting Hitachi NAS configuration issues
- Troubleshooting installation of Tesseract software
- Troubleshooting RHEL 9 upgrade issue
- Troubleshooting CyberArk Password Manager Configuration Issues
Managing site collections
On the site collections details page, you can view detailed information about a site collection, and edit or delete the site collection. You can also run a scan on the site collection from this page.
Use the provided dynamic search filter to search for configured sites based on the name of the site.
To view configured site collections
- In the Console, click Settings > SharePoint Sources.
- In the SharePoint Sources list page, click the web application that the site collections are a part of.
- On the web application details page, click Monitored Site Collections.
The screen displays a list of all configured site collections.
- On the Site Collections listing page, review the following information about the configured site collections.
The name of the site collection.
The URL of the site collection
The scanning schedule for the site collection. By default, this column is hidden. To unhide this column, click the column heading and select Columns > Scanning Schedule .
The date and time of the last full scan of the site collection.
The time this site collection's index was last updated with scan information.
After every scan, the index is updated with information about the changes to the folder hierarchy on a site collection. This column indicates whether the last update was successful or has failed. It also indicates number of scan files pending for this site collection on the Indexer and the number of files that failed to be indexed. The files that failed to be indexed, are present in the
$data/indexer/errfolder on the Indexer. If you do have failed files on the indexer, you can move them from theerrfolder to the$data/inboxfolder and attempt a full scan of the site collection.If the scan information again fails to be indexed, contact Arctera support.
The time this site collection's index was last updated with access event information.
As new access events come in, the index for the site collection is periodically updated with information about these events. This indicates whether the last update was successful or has failed. It also indicates number of audit files pending for this site collection at the Indexer and the number of files that failed to be indexed. Audit files are present in the
$data/indexer/defaultfolder on the Indexer. If you do have failed files on the indexer, you can try moving them back to$data/inboxfolder on the Indexer.If the new audit information again fails to be indexed, contact Arctera support.
The status of event monitoring for the site collection, whether enabled or disabled. By default, this column is hidden.
Whether a legal hold is being enforced for the site collection. You can choose to prevent access information for a site collection from being archived or deleted by putting a legal hold on the site collection. Information Governance preserves the access events information for such site collections indefinitely. By default, this column is hidden.
- Click the Export icon at the bottom of the page to save the data on the Monitored Site Collections panel to a .csv file.
You can also edit the properties of the site collection, start an unscheduled scan of the site collection, delete the site collection, view the event log or scan history of the site collection, or download logs for troubleshooting purposes.
To edit a site collection
- On the web application details page, click Monitored Site Collections.
- Select the site collection that you want to edit, and from the Select Action drop-down, select Edit.
- On the Edit site collection screen, make the necessary configuration changes.
- Click Save.
To delete a site collection
- On the web application details page, click Monitored Site Collections.
- Select the site collection that you want to delete, and from the Select Action drop-down, select Delete.
- Click OK on the confirmation message.
To view the scan status of a site collection
- On the web application details page, click Monitored Site Collections.
- Select the site collection for which you want to view the scan history, and from the Select Action drop-down, select Scan Status.
The scan status for the site collection appears.
You can also view the scan history and scan errors for a site collection.
See Viewing scan errors .
To view events pertaining to a site collection
- In the Console, click Settings > SharePoint Sources, and select a web application.
- On the web application details screen, click Monitored Site Collections.
- Click the Select Action drop-down for the corresponding site collection, and select Event Log.
The event log for that site collection appears.
- To download the logs for the site collection, click the Select Action drop-down for the corresponding site collection, and select Download Logs.
Information Governance downloads a compressed folder containing the logs for this site collection from all relevant Information Governance servers.
To scan site collections in a batch
- On the Monitored site collections tab, select a configured site collection, and select Scan from the Select Action drop down corresponding to a share.
Note:
The Scan option is not available for site collections that have been disabled.
- To scan multiple site collections, select one or more site collections using the check boxes.
- Click Scan, and select Scan Selected Records.
Optionally, filter site collections as needed using the filters available on the page. ClickScan, and select Scan Filtered Records.
Note:
You can use a command line utility, scancli.exe, to further customize the scan, view the scan jobs running on a specified node, or display the scan status for specified site collections. For details, See scancli.exe. You can also use the Scanning dashboard view to scan shares and site collections based on more granular criteria.
To enable or disable site collections
- In the Management Console, click Settings > SharePoint Sources.
- Click the web application that the site collections are a part of.
- On the filer detail screen, click Monitored Site Collections.
- Click the Action drop-down corresponding to a share, and select Enable to enable a site collection that has been disabled.
- Click the Action drop-down corresponding to a share, and select Disable to disable a site collection.
More Information