NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring and notifications
- Section I. Configuring hosts
- Section II. Configuring storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud storage, OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Create a Media Server Deduplication Pool (MSDP) storage server for image sharing
- Managing protection plans
- Managing classic policies
- Managing backup images
- Configuring storage
- Section III. Managing credentials
- Managing credentials for workloads and systems that NetBackup accesses
- About credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Managing credentials for workloads and systems that NetBackup accesses
- Section IV. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted primary servers
- Access keys
- Configuring authentication options
- Section V. Managing role-based access control
- About role-based access control in NetBackup
- Configuring RBAC roles
- Configuring RBAC
- Notes for using NetBackup RBAC
- Add AD or LDAP domains
- Add a custom RBAC role
- Edit or remove a role a custom role
- View users in RBAC
- Add a user to a role (non-SAML)
- Add a user to a role (non-SAML, smart card user without AD or LDAP domain association or mapping)
- Add a user to a role (SAML)
- Remove a user from a role
- Default RBAC roles
- Administrator
- Default AHV Administrator
- Default Cloud Administrator
- Default NetBackup Command Line (CLI) Administrator
- Default Kubernetes Administrator
- Default NetBackup Kubernetes Operator Service
- Default Microsoft SQL Server Administrator
- Default Oracle Administrator
- Default RHV Administrator
- Default SaaS Administrator
- Default Resiliency Administrator
- Default Security Administrator
- Default Storage Administrator
- Default Universal Share Administrator
- Default VMware Administrator
- Configuring RBAC
- RBAC permissions
- About role permissions
- Global > BMR
- Global > NetBackup Web Management Console Administration
- Global > NetBackup management
- Access hosts
- Agentless hosts
- Anomalies
- CLI sessions
- Data classifications
- Email notifications
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote primary server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted primary servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Access control
- Security events
- Certificate management
- Disaster recovery passphrase
- Identity provider and SAML certificate configuration
- Key Management Services (KMS)
- Passphrase constraints
- Service principal configuration
- Global security settings
- Trust versions
- API keys
- User certificates
- User sessions and authentication
- Global > Storage
- Assets
- Protection plans
- Credentials
- Manage access
- Section VI. Managing detection and reporting
- Managing deployment
- Managing Resiliency Platforms
- NetBackup SaaS Protection
- NetBackup Flex Scale
- Managing Bare Metal Restore (BMR)
- Troubleshooting the NetBackup Web UI
Viewing the detailed NetBackup audit report
To view the full audit report
- Log on to the primary server.
- Enter the following command to display the audit report in the summary format.
Windows: install_path\NetBackup\bin\admincmd\nbauditreport
UNIX: /usr/openv/netbackup/bin/admincmd\nbauditreport
Or, run the command with the following options.
-sdate
<"MM/DD/YY [HH:[MM[:SS]]]">
The start date and time of the report data you want to view.
-edate
<"MM/DD/YY [HH:[MM[:SS]]]">
The end date and time of the report data you want to view.
-ctgy category
The category of user action that was performed. Categories such as POLICY may contain several sub-categories such as schedules or backup selections. Any modifications to a sub-category are listed as a modification to the primary category.
See the NetBackup Commands Guide for -ctgy options.
-user
<username[:domainname]>
Use to indicate the name of the user for whom you'd like to display audit information.
-fmt DETAIL
The -fmt DETAIL option displays a comprehensive list of audit information. For example, when a policy is changed, this view lists the name of the attribute, the old value, and the new value. This option has the following sub-options:
[-notruncate] . Display the old and new values of a changed attribute on separate lines in the details section of the report.
[-pagewidth <NNN>] . Set the page width for the details section of the report.
-fmt PARSABLE
The -fmt PARSABLE option displays the same set of information as the DETAIL report but in a parsable format. The report uses the pipe character (|) as the parsing token between the audit report data. This option has the following sub-options:
[-order <DTU|DUT|TDU|TUD|UDT|UTD>]. Indicate the order in which the information appears.
D (Description)
T (Timestamp)
U (User)
- The audit report contains the following details:
DESCRIPTION
The details of the action that was performed.
USER
The identity of the user who performed the action.
TIMESTAMP
The time that the action was performed.
The following information only displays if you use the -fmt DETAIL or the -fmt PARSABLE options.
CATEGORY
The category of user action that was performed.
ACTION
The action that was performed.
REASON
The reason that the action was performed. A reason displays if a reason was specified for the operation that created the change.
DETAILS
An account of all of the changes, listing the old values and the new values.
Example of the audit report:
[root@server1 admincmd]# ./nbauditreport TIMESTAMP USER DESCRIPTION 04/20/2018 11:52:43 root@server1 Policy 'test_pol_1' was saved but no changes were detected 04/20/2018 11:52:42 root@server1 Schedule 'full' was added to Policy 'test_pol_1' 04/20/2018 11:52:41 root@server1 Policy 'test_pol_1' was saved but no changes were detected 04/20/2018 11:52:08 root@server1 Policy 'test_pol_1' was created 04/20/2018 11:17:00 root@server1 Audit setting(s) of master server 'server1' were modified Audit records fetched: 5