VMware datastore corrupted due to snaprestore being performed on NetApp end

• VMware
• Ontap 9.x
• Snaprestore

• VMware datastores have become corrupted, rendering many servers inaccessible.
• The EMS logs indicate that snaprestores have been executed on LUNs that experienced corruption at the host end.

Fri May 31 15:51:57 +0400 [node4: config_async_0: wafl.snaprestore.revert:info]: Reverting volume vol04_v@vserver:a151xcvb-9xxx-1xvc-axfg-0xcvfgsd6 to a previous Snapshot copy with snapid 5.
Fri May 31 15:54:12 +0400 [node4: config_async_0: wafl.snaprestore.revert:info]: Reverting volume vol03_v@vserver:a151xcvb-9xxx-1xvc-axfg-0xcvfgsd6 to a previous Snapshot copy with snapid 4.
Fri May 31 15:58:28 +0400 [node4: config_async_0: wafl.snaprestore.revert:info]: Reverting volume vol06_v@vserver:a151xcvb-9xxx-1xvc-axfg-0xcvfgsd6 to a previous Snapshot copy with snapid 5.
Fri May 31 16:03:35 +0400 [node4: config_async_0: wafl.snaprestore.revert:info]: Reverting volume vol06_v@vserver:a151xcvb-9xxx-1xvc-axfg-0xcvfgsd6 to a previous Snapshot copy with snapid 6.

• The audit logs indicate that the restore button was activated in the system manager, resulting in the volumes containing datastores being snap-restored to an older snapshot.

Fri May 31 2024 15:54:08  04:00 [kern_audit:info:2734] :: node: http :: 10.1xx.1yy.xc:5xcd9 :: node:ycc\user :: POST /api/snapmirror/relationships/fbxcc-cdf-1xxf-8xx6-ddfdfc/restore : {"destination":{"path":"node:vol03_v","cluster":{"name":"AEHQNAS01","uuid":"10xcxcc2-4xxc-1xx7-9xx2-0xcdfd0"}},"source_snapshot":"snapmirror.a1xcd635-9xx0-1xcv7-acdf-0cddf6_2xcdc68.2024-05-17_230500","storage_efficiency_enabled":false} :: Success:

• The snaprestore process will remove the most recent snapshot beyond that point.
• Post snaprestore, snapmirror is performed which made the snaprestored data to be transferred to other site.

Fri May 31 16:00:49  04 2024 ResyncSetup[May 31 16:00:49]:fxxf-1xxb-1xxf-8x6-dxx4c Operation-Uuid=6bx1-xx5-1xf-8xx-dxxxf4c Group=none Operation-Cookie=0 action=Start source=node1:vol03_v destination=node2:rep_vol_003
Fri May 31 16:00:56  04 2024 ResyncSetup[May 31 16:00:49]:xxf-1xxb-1xxf-8x6-dxx4c Operation-Uuid=6bx1-xx5-1xf-8xx-dxxxf4c Group=none Operation-Cookie=0 action=End source=node1:vol03_v destination=node2:rep_vol_003 status=Success