Skip to main content
NetApp Knowledge Base

ARP creates snapshot with delay, after detecting new extensions

Views:
32
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

  • ONTAP 9
  • Autonomous Ransomware Protection (ARP)
  • Detecting new extension type only

Issue

After detecting a new extension type file, ARP creates an anti-ransomware backup snapshot after approximately 15 minutes.
  • Detecting time:

::> security anti-ransomware volume show -vserver svm1 -volume test1
Vserver Name: svm1
Volume Name: test1
State: enabled
Dry Run Start Time: -
Attack Probability: low
Attack Timeline: 6/21/2024 16:53:08
Number of Attacks: 1

  • Creating time of snapshot:

::> volume snapshot show -vserver svm1 -volume time1 -time
Vserver  Volume  Snapshot                           Create Time
-------- ------- ---------------------------------- -------------------------
svm1
        test1
                 22h_snap.2024-06-20_2200           Thu Jun 20 22:00:00 2024
                 Anti_ransomware_backup.2024-06-21_1707    Fri Jun 21 17:07:21 2024
                 22h_snap.2024-06-21_2200           Fri Jun 21 22:00:00 2024

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.