Self-Hosted Q&A

Hi All ,Currently there is a warning about pkexec described in https://isc.sans.edu/diary/rss/28272.I was able to validate PKEXEC tool existence as SUID binary on hyperscale nodes . This seems to be OS level application and not used by commvault software .I believe a simple chmod of this executable is enough to prevent the exploit of being used (chmod 0755 /usr/bin/pkexec)Is there any action item on Commvault to remediate this or this needs to be addressed by customer by applying OS patches ? 

A couple of my Linux file agents are showing events telling me that “Optimized Scan could not process the request for [/home/]. Falling back to regular scan for this volume/path. Possible causes: Optimized Scan Service is down, Optimized Scan does not monitor this volume/path, or the database is inconsistent.”This may have begun after updating the commserve, mediaagents, and the Linux agents to 11.25.19 a couple days ago.How can I resolve this? I couldn’t find documentation on this issue. I am not the primary admin for these file servers, I’m just the commvault admin. I examined the FAQ here and I don’t believe that any of these are the issue.

Hello,we have ransomware protection enabled on our Media Agents!  But in case of attack we can lost the MediaAgent OS and don’t have access to the Libraries. MediaAgents have local disks for Disk LibrariesWhat kind of backup should I have to recover quick a MA from a different MA, without lost the backup data on the local disks on the impacted MediaAgent?What is the fastest restore, 1 touch non interactive will clean all disks first?We running V11SP24.25, MediaAgents are Dell servers. Thanks Juergen

Good Day,I recently found out some of our mailboxes in Exchange 2013 were not being backed up.  I inherited this setup from a previous tech, and I found out that we are using AD Group discovery and that some accounts weren’t being added to the group.I see that there is also an option to configure Database discovery.  What’s the best way to switch to this?  My plan is to create a new association and add in all our databases and run a backup.  Can I then delete the AD group discovery?  Is there an issue having both - I don’t want to duplicate any data being backed up since we have disk space issues.Also, will using Database discovery back up the public folders or do I need to set up something else?  I noticed our public folders are not currently being backed up.Thanks for any assistance.Nick

I am migrating backup site between the commserve, DB version of the CommCell source is 13.0.5850.14 and destination is 13.0.5216.0. can i do the migration

HiIs it possible to share a custom report view, with predefined filters?Each time I create a new view, in the webconsole, the filters is not saved. Thank you. 

I’ve enabled two-factor auth but cannot login to the traditional Java Commvault Console.  Is there a way to login from here?  I’ve tried to input the PIN as the password but no luck there either.

What does it mean when one node of my HyperScale has a down pointing green arrow and the penguin icon is greyed out?  

Our PaaS team is interested in running backups with kubectl and I couldn’t give them a straight answer on this. Is this something that could be built or is in the works?

Hello,I noticed a small issue in one of my schedule. My commserver is in Helsinki time zone UTC+0200I created a replication schedule to run everyday 12:00 AM but I noticed job was running at 10:00 AM local time.Below screenshots captured at 11:00 AM local time. It shows next job in 23 hours (i.e. 10 AM local time) When changing time zone explicitly to UTC+0200, it picks correct time So looks like commserver is identifying itself in a different timezone. I validated OS time on commserver and it is correct (UTC+0200). Any ideas?I am concerned that this may mess up backup times.

A client with both File and SQL backup activated: Will commvault automatically skip SQL data like mdf, ldf in the File backup?Thanks

Management has provided me with a separate partition for my Database backup jobs. I already have a storage policy dedicate to our DB backups. Is there a way to force a backup job or a storage policy to only save to a specified mount path? I am thinking I can move a mount path to the DB partition and then direct my DB storage policy or DB jobs to copy only to the mount path on the DB partition that has been provided 

Hi Good day So there was a power outage, and I lost the SAN LUNs I provisioned for both DDB, Index Cache and even the storage repository. They were mapped/zoned to the Media Agent (Server) initially. Unfortunately, the guy on ground provisioned new storage for these DDBs AND Index Cache, changed the drive letters and reassigned the partitions I have brought back the LUNs and the backup files within are still intact. However, the location specified in the media library is offline. I can’t restore anything from this location.Please I need help, because we need to restore a file server

we hv one oracle DB that was restore but asking of archive log we cannot find

The Front End Volumes are as follows:Required how much S3-IA ; Glacier and Deep Archive required for 1 yearPolicy Type Retention Type Front End TB Document Store / File Shares 8 Years 200 VM Backups 30 days

HiHad anyone created a report, that can show retention(date) based on each client level? 

I’m very curious if other companies have adopted Continuous Replication within their VMware environments. We are a rather large RP4VM shop and there are many… challenges. I’ve watched CR mature over time and we’re at the point where we’re ready to start testing at scale. We have roughly 7,000 VM’s which need to be replicated (no point in time recovery, just latest recovery point) and I’m curious how others have configured their environment to support 24x7 replication (absolutely no downtime).

Hi Community.Our Riskassessment Team found some Issues with jQuery on our ContentMailSever/Exchange Online Access Systems. It seems they are using the jQuery Version 1.9.1 and it gets flagged for being EOL.All our installed Clients are on V11.24.25 and also have the Hotfix for the log4j Issue.Is there any timeline for replace the old jQuery Version in V11.24.x or do we need to update to V11.25 or even V11.26?Or is there a supported way, to replace the libs manually?

Hello everyone, Before I open a ticket, I decided to ask here first, :).I’m with a alert configured to send via e-mail to a client when the Job Restore Succeed (Replication), but this client ask me to add more info so he don’t need to open the Command Center to see exactly what exactly was successful.With this, I went in the Command Center > Monitoring > Alerts > Alerts Definitions > the Alert itself. I edited the template and add more informations in it and then I saved the template, but when the client received the alert, he received the e-mail totally deconfigured, with the criterias I inserted, but with no informations:So what I did after this was to restore everything back to the original, and reconfigure the Alert using the Console Java Gui. I saved the template, and inserted more options in t

Thanks Bill for detailed documentation. This helped me during setting up NFS for teradata backup purposes.I see performance for the jobs written on NFS is not same as other jobs using same disk library.NFS jobs are running with average throughput of 100GB/hr while other agent jobs to same disk library is in TB/hr.Ran CVperformance check on disk cache and that is also much better (throughput in TB/hr) Anything to check further. I have logged support case but any advice is appreciated.

Hi all, We’ve recently implemented IMDSv2 to our Commvault AWS deployed infrastructure. Are there plans to support IMDSv2 in future releases of Commvault? From what I can tell right now, we are getting:“Failed to connect to virtual machine host as user “redacted” from access node “redacted”. Please select AWS proxy that has access to AWS instance metadata”Our access node authentication method is: “IAM Role” Just interested to understand is this is a limitation of the SDK being used for making connections over the API, or are we missing some permission set on our end to get this working?

Does anyone know if Hub site ( is part of sharepoint ) is supported by commvault . I can't find anything about it on BOL. I can't find anything in commvault database. When I run sharepoint site disovery I see everything except Hub sites.

what does this mean Failed to extract the simpana mount pathit will complete the backup but fail with about 74 file out of 414 file seen.

had a problem with my Shp setup:1 sql Server hosting the Shp Db → sql backupagent installed1 shp Server where the shp backupclient is installed now i get the error: 19956 1     01/25 08:15:22 ### CVSPPermissionCheck+<>c__DisplayClass21_0 <CheckSharePointSQLServerAccount>b__0 - SQL Server: SPSQL instance: SP2017 User Account: NT Service\SQLAgent$SP2017 does not have full permissions to job results and log files folders 19956 1     01/25 08:15:22 ### CVSPPermissionCheck CheckFolderAccess - Exception System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.   at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)   at System.Security.Principal.NTAccount.Translate(Type targetType)   at CVSPCompatibilityCheck.CVSPPermissionCheck.CheckFolderAccess(String username, String path)19

Hello, Everyone.I am currently in an environment where they use CyberArk to change all service accounts passwords at different intervals. They have their sysadmin sa for sql database backup on cyberark and it changes often. The backup administrator does not know when the password changes because it is automated. This often leads to backup failure due validation of credentials. Is there a workflow to update the passwords as they change that?  Or a way commvault can be on on-boarded on cyberark so the passwords updates as they change. Or a different way that the issue can be resolved. Note:Security is paramount to them, they are not looking to change how their passwords are generated. Please, help.