Skip to main content
NetApp Response to Russia-Ukraine Cyber Threat
In response to the recent rise in cyber threat due to the Russian-Ukraine crisis, NetApp is actively monitoring the global security intelligence and updating our cybersecurity measures. We follow U.S. Federal Government guidance and remain on high alert. Customers are encouraged to monitor the Cybersecurity and Infrastructure Security (CISA) website for new information as it develops and remain on high alert.
NetApp Knowledge Base

Is it normal additional volumes are created on the storage cluster when taking Veeam backups?

Views:
238
Visibility:
Public
Votes:
0
Category:
element-software
Specialty:
hci
Last Updated:

Applies to

  • NetApp Element Plug-In for Veeam Backup & Replication version

Answer

Yes - This is expected behaviour. The Veeam user will send API calls to the storage cluster to:

  • Create a clone of the volume
  • Add the clone to a new volume access group (VAG)
  • Take a snapshot from the cloned volume (not visible in Active IQ)
  • Delete the VAG
  • Delete/purge the cloned volume when the snapshot is complete

Additional Information

An example of events noticed from NetApp SolidFire Active IQ during a Veeam backup of volumeID 31 with temporary volumeID 357:

 

EventID

Time

Type

Message

Details

 

371486

2020-05-03 03:45:16

apiEvent

API Call (PurgeDeletedVolume)

{ "success": true, "params": { "volumeID": 357, "requestAPIVersion": "11.5" }, "method": "PurgeDeletedVolume", "context": { "ip": "10.92.50.252", "user": "veeam" } }

 

371485

2020-05-03 03:45:16

apiEvent

API Call (DeleteVolume)

{ "success": true, "params": { "volumeID": 357, "requestAPIVersion": "11.5" }, "method": "DeleteVolume", "context": { "ip": "10.92.50.252", "user": "veeam" } }

 

371484

2020-05-03 03:45:14

apiEvent

API Call (CreateVolumeAccessGroup)

{ "success": true, "params": { "initiators": [ "iqn.<host>" ], "volumes": [ 357 ], "name": "<VeeamInitiator>", "requestAPIVersion": "11.5" }, "method": "CreateVolumeAccessGroup", "context": { "ip": "10.92.50.252", "user": "veeam" } }

 

371480

2020-05-03 03:45:09

cloneEvent

Clone volume succeeded

{ "vvolOperation": null, "virtualVolumeID": null, "srcVolumeID": 31, "volumeID": 357, "cloneID": 314 }

 

371472

2020-05-03 03:45:08

cloneEvent

Clone volume started

{ "vvolOperation": null, "virtualVolumeID": null, "srcVolumeID": 31, "volumeID": 357, "cloneID": 314 }

 

 

 

 

Scan to view the article on your device