Arctera Data Insight Administrator's Guide
- Section I. Getting started
- Introduction to Arctera Data Insight administration
- Configuring Data Insight global settings
- About Data Insight licensing
- SQLite WAL mode
- Configuring SMTP server settings
- About scanning and event monitoring
- Monitoring Indexer Node Storage Utilization
- About filtering certain accounts, IP addresses, and paths
- About archiving data
- About Data Insight integration with Data Loss Prevention (DLP)
- Importing sensitive files information through CSV
- Configuring advanced analytics
- About open shares
- About user risk score
- Configuring file groups
- Configuring Workspace data owner policy
- Configuring Management Console settings
- About bulk assignment of custodians
- Configuring Watchlist settings
- Configuring Metadata Framework
- Proof of concept
- Section II. Configuring Data Insight
- Configuring Data Insight product users
- Configuring Data Insight product servers
- About Data Insight product servers
- Adding a new Data Insight server
- Managing Data Insight product servers
- Viewing Data Insight server details
- About node templates
- Adding Portal role to a Data Insight server
- Adding Classification Server role to a Data Insight server
- Assigning Classification Server to a Collector
- Associating a Classification Server pool to a Collector
- Viewing in-progress scans
- Configuring Data Insight services
- Configuring advanced settings
- Monitoring Data Insight jobs
- Rotating the encryption keys
- Viewing Data Insight server statistics
- About automated alerts for patches and upgrades
- Deploying upgrades and patches remotely
- Using the Upload Manager utility
- About migrating storage devices across Indexers
- Viewing the status of a remote installation
- Configuring saved credentials
- Configuring directory service domains
- About directory domain scans
- Adding a directory service domain to Data Insight
- Managing directory service domains
- Fetching users and groups data from NIS+ scanner
- Configuring attributes for advanced analytics
- Deleting directory service domains
- Scheduling scans
- Configuring business unit mappings
- Importing additional attributes for users and user groups
- Configuring containers
- Section III. Configuring native file systems in Data Insight
- Configuring NetApp 7-mode file server monitoring
- About configuring NetApp file server monitoring
- Prerequisites for configuring NetApp file servers
- Credentials required for configuring NetApp filers
- Credentials required for configuring NetApp NFS filers
- Configuring SMB signing
- About FPolicy
- Preparing Data Insight for FPolicy
- Preparing the NetApp filer for Fpolicy
- Preparing the NetApp vfiler for Fpolicy
- Configuring NetApp audit settings for performance improvement
- Preparing a non-administrator domain user on the NetApp filer for Data Insight
- Enabling export of NFS shares on a NetApp file server
- Excluding volumes on a NetApp file server
- Handling NetApp home directories in Data Insight
- Configuring clustered NetApp file server monitoring
- About configuring a clustered NetApp file server
- About configuring FPolicy in Cluster-Mode
- Pre-requisites for configuring clustered NetApp file servers
- Credentials required for configuring a clustered NetApp file server
- Preparing a non-administrator local user on the clustered NetApp filer
- Preparing a non-administrator domain user on a NetApp cluster for Data Insight
- Persistent Store
- Preparing Data Insight for FPolicy in NetApp Cluster-Mode
- Preparing the ONTAP cluster for FPolicy
- About configuring secure communication between Data Insight and cluster-mode NetApp devices
- Enabling export of NFS shares on a NetApp Cluster-Mode file server
- Enabling SSL support for Cluster Mode NetApp auditing
- Configuring EMC Celerra or VNX monitoring
- Configuring EMC Isilon monitoring
- About configuring EMC Isilon filers
- Prerequisites for configuration of Isilon or Unity VSA file server monitoring
- Credentials required for configuring an EMC Isilon cluster
- Configuring audit settings on EMC Isilon cluster using OneFS GUI console
- Configuring audit settings on EMC Isilon cluster using the OneFS CLI
- Configuring Isilon audit settings for performance improvement
- Preparing Arctera Data Insight to receive event notifications from an EMC Isilon or Unity VSA cluster
- Creating a non-administrator user for an EMC Isilon cluster
- Utilizing access zone's SmartConnect Zone/Alias mappings
- Purging the audit logs in an Isilon filer
- Configuring EMC Unity VSA file servers
- Configuring Hitachi NAS file server monitoring
- Configuring Windows File Server monitoring
- Configuring Veritas File System (VxFS) file server monitoring
- Configuring monitoring of a generic device
- Managing file servers
- About configuring filers
- Viewing configured filers
- Adding filers
- Add/Edit NetApp filer options
- Add/Edit NetApp cluster file server options
- Add/Edit EMC Celerra filer options
- Add/Edit EMC Isilon file server options
- Add/Edit EMC Unity VSA file server options
- Add/Edit Windows File Server options
- Add/Edit Veritas File System server options
- Add/Edit a generic storage device options
- Add/Edit Hitachi NAS file server options
- Custom schedule options
- Editing filer configuration
- Deleting filers
- Viewing performance statistics for file servers
- About disabled shares
- Adding shares
- Managing shares
- Editing share configuration
- Deleting shares
- About configuring a DFS target
- Adding a configuration attribute for devices
- Configuring a DFS target
- About the DFS utility
- Running the DFS utility
- Importing DFS mapping
- Renaming storage devices
- Configuring NetApp 7-mode file server monitoring
- Section IV. Configuring SharePoint data sources
- Configuring monitoring of SharePoint web applications
- About SharePoint server monitoring
- Credentials required for configuring SharePoint servers
- Configuring a web application policy
- About the Data Insight web service for SharePoint
- Viewing configured SharePoint data sources
- Adding web applications
- Editing web applications
- Deleting web applications
- Adding site collections
- Managing site collections
- Removing a configured web application
- Configuring monitoring of SharePoint Online accounts
- About SharePoint Online account monitoring
- Configuring user with minimum privileges in Microsoft 365
- Creating an application in the Microsoft Azure portal
- Configuring application without user impersonation for Microsoft 365
- Adding SharePoint Online accounts
- Managing a SharePoint Online account
- Adding site collections to SharePoint Online accounts
- Managing site collections
- Configuring monitoring of SharePoint web applications
- Section V. Configuring cloud data sources
- Configuring monitoring of Box accounts
- Configuring OneDrive account monitoring
- Configuring Azure Netapp Files Device
- Managing cloud sources
- Section VI. Configuring Object Storage Sources
- Section VII. Health and monitoring
- Section VIII. Alerts and policies
- Section IX. Remediation
- Configuring remediation settings
- Section X. Reference
- Appendix A. Data Insight best practices
- Appendix B. Migrating Data Insight components
- Appendix C. Backing up and restoring data
- Appendix D. Data Insight health checks
- About Data Insight health checks
- Services checks
- Deployment details checks
- Generic checks
- Data Insight Management Server checks
- Data Insight Indexer checks
- Data Insight Collector checks
- Data Insight Windows File Server checks
- Data Insight SharePoint checks
- Classification server health checks
- Data Insight self service portal server health checks
- About Data Insight health checks
- Appendix E. Command File Reference
- Appendix F. Data Insight jobs
- Appendix G. Troubleshooting
- About general troubleshooting procedures
- About the Health Audit report
- Location of Data Insight logs
- Downloading Data Insight logs
- Migrating the data directory to a new location
- Troubleshooting FPolicy issues on NetApp devices
- Troubleshooting EMC Celera or VNX configuration issues
- Troubleshooting EMC Isilon configuration issues
- Troubleshooting SharePoint configuration issues
- Troubleshooting Hitachi NAS configuration issues
- Troubleshooting installation of Tesseract software
- Troubleshooting RHEL 9 upgrade issue
About deleting files
Data Insight provides the ability to delete unwanted files from CIFS devices and M365 cloud data sources. Currently, supported M365 cloud data sources are SharePoint Online and OneDrive. You can delete old and inactive files, and the folders holding those files, from the Workspace and Reports tab in the Data Insight Management console.
To configure Delete action for CIFS devices,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to CIFS Delete Configuration section.
- If you want Delete Files action to be available in Workspace and Reports tab, check the Enable delete files action box.
- Check the Delete Empty Folder box to deletes empty folders.
- In the Devices for action field, enter comma separated device names or patterns. For example 10.209.89.1,10.209.89.2, 10.209.90.*
- In the File count field, add number of files you want to delete in a single delete request.
- You can select either User scan credentials or Select user in the Run As field. If your choice is Select user, make sure the selected user has access to the filer or you can create new user by clicking Add new from the drop-down and providing required details.
- In the Run Delete Action On field, select the option where you want to run delete files, either Management Server or Collector
- Click OK to save.
After configuring delete action, you can View or Edit existing delete action configuration.
Note:
If you are using supporting hybrid SVM alias functionality and then add alias SVM with CIFS monitoring, you need to resolve alias name in the host entry to support delete action on that aliased SVM. For example: CIFS_LIF_IP NETAPPSV NETAPPSV_aliased
Note:
Delete action will run only on the Collector node for M365 data sources. Proxy mode for M365 data sources is also supported.
To configure Delete action for SharePoint Online Account,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to M365 Sources section.
- Click Configure Delete Action drop-down.
- Select SharePoint Online Account.
- Select SharePoint Online Account URL from the drop-down.
- Enable Delete Files Action checkbox will be checked by default. Uncheck this box if you want to create a delete action configuration but intend keep it disabled. You can check the box later to enable this delete action.
- Check Delete Empty Folder checkbox to delete empty folders.
- If you want to exclude any sites from delete action, click Select Sites.
- Check the box next to the site that you want to exclude and click Save.
- In the File count field, add number of files you want to delete in a single delete request.
- Select the credentials that you want to use from the Client Credentials drop-down. You can add new client credentials by clicking Add new from the drop-down and providing required details and completing authorization. Refer To create and register an application with Microsoft from the following section for more details:
See Registering Data Insight with Microsoft to scan Azure AD.
- Click Re-authorize and complete authorization for selected credentials. Re-authorization is mandatory only for the existing client credentials.
- Click Save to complete the process.
To configure Delete action for Microsoft OneDrive Account,
- Navigate to Settings > Remediation > Data Management > Delete Files and refer to M365 Sources section.
- Click Configure Delete Action drop-down.
- Select Microsoft OneDrive Account.
- Select Microsoft OneDrive Account Name from the drop-down.
- Enable Delete Files Action checkbox will be checked by default. Uncheck this box if you want to create a delete action configuration but intend keep it disabled. You can check the box later to enable this delete action.
- Check Delete Empty Folder checkbox to deletes empty folders.
- In the File count field, add number of files you want to delete in a single delete request.
- Select the credentials that you want to use from the Client Credentials drop-down. You can add new client credentials by clicking Add new from the drop-down and providing required details and completing authorization. Refer To create and register an application with Microsoft from the following section for more details:
See Registering Data Insight with Microsoft to scan Azure AD.
- Click Re-authorize and complete authorization for selected credentials. Re-authorization is mandatory only for existing client credentials.
- Click Save to complete the process.
For M365 data sources, you need following application permissions in addition to the existing permissions:
API | Permission name |
|---|---|
Microsoft Graph | Files.ReadWrite.All |
SharePoint | Sites.ReadWrite.All |
After configuring delete action , you can View, Edit, Disable, and Delete existing delete action configuration. You can add up to 5 Client IDs for both devices.
If you edit the existing delete action, you need to re-authorize all application permissions.
For M365 data sources, delete action is not supported for Inactive SubFolders listed under Folder Activity in the Workspace tab.