ARP creates snapshot with delay, after detecting new extensions
Applies to
- ONTAP 9
- Autonomous Ransomware Protection (ARP)
- Detecting new extension type only
Issue
After detecting a new extension type file, ARP creates an anti-ransomware backup snapshot after approximately 15 minutes.
- Detecting time:
::> security anti-ransomware volume show -vserver svm1 -volume test1
Vserver Name: svm1
Volume Name: test1
State: enabled
Dry Run Start Time: -
Attack Probability: low
Attack Timeline: 6/21/2024 16:53:08
Number of Attacks: 1
- Creating time of snapshot:
::> volume snapshot show -vserver svm1 -volume time1 -time
Vserver Volume Snapshot Create Time
-------- ------- ---------------------------------- -------------------------
svm1
test1
22h_snap.2024-06-20_2200 Thu Jun 20 22:00:00 2024
Anti_ransomware_backup.2024-06-21_1707 Fri Jun 21 17:07:21 2024
22h_snap.2024-06-21_2200 Fri Jun 21 22:00:00 2024