Daily report of changes - are you doing this?

Question

SO - I run this script daily - it shows changes - who updated policy, etc...I am on unix, so I use crontab### # nbchanges audit script### 58 23 * * * /var/adm/scripts/nbchanges.ksh &gt; /dev/null 2&gt;&amp;1# daily report filesDATE=`/bin/date +%m/%d/%Y`YYYYMMDD=`/bin/date +%Y%m%d`sleep 121# Total changesecho "Report of NetBackup Changes for " $DATE &gt; /usr/openv/tmp/nb.changes.total.$YYYYMMDD/usr/openv/netbackup/bin/admincmd/nbauditreport -sdate $DATE &gt;&gt; /usr/openv/tmp/nb.changes.total.$YYYYMMDD# Changes - Remove automated processesecho "Report of NetBackup Changes for " $DATE &gt; /usr/openv/tmp/nb.changes.$YYYYMMDD/usr/openv/netbackup/bin/admincmd/nbauditreport -sdate $DATE | /usr/bin/grep -v "root@master" | /usr/bin/grep -v "Automatic" &gt;&gt; /usr/openv/tmp/nb.changes.$YYYYMMDD# policy changesecho "Report of NetBackup Policy Changes for " $DATE &gt; /usr/openv/tmp/nb.policy.changes.$YYYYMMDD/usr/openv/netbackup/bin/admincmd/nbauditreport -sdate $DATE -ctgy POLICY &gt;&gt; /usr/openv/tmp/nb.policy.changes.$YYYYMMDD# add tag line to know where it came from!echo /usr/openv/tmp/nb.changes.$YYYYMMDDecho /usr/openv/tmp/nb.changes.$YYYYMMDDecho "This email was generated by script /var/adm/scripts/nbchanges.ksh on server master" &gt;&gt; /usr/openv/tmp/nb.changes .$YYYYMMDDecho "Run from crontab 58 23 * * * /var/adm/scripts/nbchanges.ksh &gt; /dev/null 2&gt;&amp;1" &gt;&gt; /usr/openv/tmp/nb.changes.$YYYYM MDDOutput like:Report of NetBackup Policy Changes for&nbsp; 06/01/2022TIMESTAMP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; USER&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DESCRIPTION06/01/22 14:35:28&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.cbcnas_mssql.PROD' were modified06/01/22 14:35:28&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.cbcnas_mssql.PROD' were modified06/01/22 09:34:32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Attributes of Policy 'STORAGE.nas11udpp_apmdt.PROD' were modified06/01/22 09:33:36&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.nas11udpp_apmdt.PROD' were modified06/01/22 07:34:13&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Policy 'DELETED.CLIENTS' was saved but no changes were detected06/01/22 07:34:13&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Client '20220601.exalog01ulap.cbc.local' was added to Policy 'DELETED.CLIENTS'06/01/22 07:34:12&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Policy 'DELETED.CLIENTS' was saved but no changes were detected06/01/22 07:34:12&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Client 'exalog01ulap.cbc.local' was deleted from Policy 'DELETED.CLIENTS'06/01/22 07:34:04&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Client 'exalog01ulap.cbc.local' was deleted from Policy 'VMWARE.Daily-B.PROD'06/01/22 07:34:00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000016@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Client 'exalog01ulap.cbc.local' was added to Policy 'DELETED.CLIENTS'&nbsp;Audit records fetched: 10&nbsp;This email was generated by script /var/adm/scripts/nbchanges.ksh on server lorenzoRun from crontab 58 23 * * * /var/adm/scripts/nbchanges.ksh &gt; /dev/null 2&gt;&amp;1&nbsp;also output likeReport of NetBackup Changes for&nbsp; 06/01/2022TIMESTAMP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; USER&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DESCRIPTION06/01/22 15:18:20&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dreid.1@lorenzo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User 'dreid.1' was successfully authenticated with host 'lorenzo'06/01/22 14:35:28&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.cbcnas_mssql.PROD' were modified06/01/22 14:35:28&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.cbcnas_mssql.PROD' were modified06/01/22 09:34:32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Attributes of Policy 'STORAGE.nas11udpp_apmdt.PROD' were modified06/01/22 09:33:36&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000018@lorenzo.cbc.local&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Include list settings of Policy 'STORAGE.nas11udpp_apmdt.PROD' were modified06/01/22 08:08:00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; e2000049@lorenzo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User 'e2000049@lorenzo' is logged out.06/01/22 02:47:08&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; fa5a961c-385e-43fb-b14b-06343af1a0c Certificate was successfully renewed for host 'innsqlcda01uwdp-backup.cbc.local'06/01/22 01:38:10&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; nbapisan@lorenzo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User 'nbapisan' authenticated successfully&nbsp;Audit records fetched: 583&nbsp;This email was generated by script /var/adm/scripts/nbchanges.ksh on server lorenzoRun from crontab 58 23 * * * /var/adm/scripts/nbchanges.ksh &gt; /dev/null 2&gt;&amp;1&nbsp;&nbsp;

quebek · Answer

Hey
I am doing something similar, like dumping all policies to a file on each day and comparing that with the previous.
About audit trials - these I am calling from OpsCenter.

admin_bkp007 · Answer

I'm using this from Opscenter, all jobs was changed send e-mail to validate it .. that's nice option.

x2 · Answer

I also monitor backup policies daily as they are the ones which are changed most. I also generate a list containing active/inactive information to quickly activate or deactivate the policies - this brings them to the state they were in the morning. This has saved me a few times when someone forgot to activate a policy after some work.
Also, any change in NetBackup sends an alert via OpsCenter. Sometimes the alerts are too many to handle but with only 3 people administring the backup system, it is easy to collaborate.
&nbsp;

krutons · Answer

I use to have a script that had similar functionality but with the web UI and the audit logs there, I didn't see much of a reason to continue using it. Do you prefer your script over the audit logs in the web UI?

Forum Discussion

Daily report of changes - are you doing this?

4 Replies

Related Content

How to determine daily change rate

OpsCenter Daily Failure Report

Netbackup daily report

Daily backup report automation

Daily Backup Failure Report including intelligent policy VMs