Hi @Damian Andre
I just wanted to let you know I PMed you the details regarding scrubbing logs.
Cheers!
Thanks @Greg Smolen ! It is great to know what is going on backstage, sometimes it is a huge help explaining things to customer with that kind of information.
@Damian Andre Of course. I will need some time to collect output and I will get back to you.
thanks @Greg Smolen !
@Robert Horowski if there are any additional areas you noticed outside of this not being scrubbed, or if you want to provide the script you wrote to help us optimize the scrubbing process please let us know!
Hi @Robert Horowski,
Glad to help on this, I wanted to also mention we do have a couple of CMRs in place for additional areas that are not scrubbed. Areas such are Account info and Email address are expected to be addressed via the below CMRs in a later release:
Account Info: CMR 323666
Email info: CMR 323667
Regards,
Greg
Hi @Greg Smolen ,
This is how I am doing it now. I’m not uploading CSDB, just using scrub logs option during Send Logs. Scrubbing logs covers a lot but still there are some information in there like user names, IPs, domain names, some hostnames, that should not be sent outside. Currently I’m using some scripts to scrub this already scrubbed log files, so I can upload it to support and still be in compliance with customer’s security policy.
Also I’ve noticed that there is an improvement in the process to scrub some additional keywords using scrub.config file
https://documentation.commvault.com/11.23/expert/5579_sending_log_files.html
but I haven’t tested it yet.
Thanks for your answer
I would recommend when sending logs files, to only send up logs for machines and not the CSDB as we do not fully scrub it of all information.
this is perfectly clear to me, so I am marking it as a best answer.
Thanks!
Hi @Robert Horowski,
We have a large number of Darksite customers that actually do not upload the CommServe database due to Security reasons. These customers still use the Scrub Logs option for just Logs files for the respective machines selected and that will go through and scrub sensitive information.
I would recommend when sending logs files, to only send up logs for machines and not the CSDB as we do not fully scrub it of all information.
Let me know if you have further questions on this.
Regards,
Greg