Snapshot created by Automated Response Policies in DII is automatically deleted
Applies to
- Data Infrastructure Insights (DII, formerly Cloud Insights))
- Storage Workload Security (formerly Cloud Secure)
- ONTAP 9
- Snapshot autodelete is enabled
Issue
- Snapshot named cloudsecure_attack_auto_XXXXXXXXXXXXXwhich is created by Automated Response Policies in DII Storage Workload Security is automatically deleted by ONTAP
- ONTAP EMS outputs wafl.volume.snap.autoDeletewhen the Snapshot is deleted
[<NODE>: snap_helper: wafl.volume.snap.autoDelete:info]: Deleting Snapshot copy 'cloudsecure_attack_auto_XXXXXXXXXXXXX' in volume '<VOLUME>@<SVM>' to recover storage.
