Audit - Who changed what policies and when

[Itegral]

We are running NBU Appliance based environment ver 2.6.1.1 and NBU ver. 7.6.1.1.

We are required to enable auditing to capture who changed what policies and when. We also have OpsCenter Analytics that I am sure can possible be useful.

Appreciate your help with what is required to be done to achieve the above without overloading the Master server with audit logs?

[Slim_786 · Accepted solution]

Hi,

Please have a look at the below link:

https://support.symantec.com/en_US/article.HOWTO105856.html#v40701145 

Please also refer to page 426 and 532 in the Opscenter Admin Guide from the link below

https://support.symantec.com/en_US/article.DOC7669.html

One of the New Focus Features within Netbackup 7.7 which will be GA later this year will be enhanced Auditing.

Kind Regards,
SLIM

[Marianne · Accepted solution]

Auditing will only show 'WHAT' was done.

To know WHO did it, you need NBAC (NetBackup Access Control). 

Unfortunately NetBackup Access Control (NBAC) is not supported when the Appliance is configured as a Master Server.
See NBU HCL: http://www.symantec.com/docs/TECH76495 

[Slim_786 · Accepted solution]

Marianne is 100% correct, however NBAC can be a beast on its own to correctly configure. 

Enhanced Auditing in NetBackup 7.7 or Appliance 2.7.1 has been added as an enhanced feature to actually move away from NBAC and will allow you to see the “Who” aspect.

However lets wait for the official announcement and feature briefing for 7.7. I would suggest that you hold on for a while until then.

Kind Regards,
Slim

[Itegral]

alright guys - thank you for your timely responses. Much appreciated.