Self-Hosted Q&A

Hi All, what is the best way to backup windows server with dfs replication via windows file agent ? 

I am currently questioning our AuxCopy to tape performance and want to get some input on how to identify the bottleneck.We have multiple plans which all have two copies to tape. One is synchronous and one is selective.Each of the two is consolidated onto another Global Secondary Copy Policy.The storage target are six LTO9 drives with a mixed LTO8 and LTO9 media inventory.The source for the copy is a NetApp StorageGRID S3 backed storage pool with deduplication connected on a 100G fiber network.We have two Media Agents which are both connected to all LTO drives and the NetApp (same VLAN).Looking at the reported speed of the drives in Commvault I get around 130MB/s all of the time.I could confirm this looking at SFP speeds on the FC switch which also stay around this value with rare peaks to around 200MB/s.What I tested already to look for the bottleneck:- only run one AuxCopy Job- run AuxCopy when no other jobs where running- validate drive > 300MB/s throughput with LTO8 media- differ

Over the weekend, we started seeing errors in SharePoint online backups for all the tenants we backup with the error: “ Failed to validate any of the configured Azure Apps against the SharePoint Tenant Admin site. 1) Please verify the SharePoint Tenant Admin Url. 2) Please check the credentials and permissions for the configured apps. 3) Please ensure Custom App authentication is enabled on the SharePoint tenant.<br/>Source: xx, Process: SharePoint”From logs on the Access Node:CheckOffice365CredModern - Office365 app credentials incorrect : CheckOffice365CredModern - Error is: The remote server returned an error: (401) Unauthorized. What we have doneVerified the Azure App secrets are not expired Verified DisableCustomAppAuthentication on the tenant is set to false Verified Azure app API permissions: Microsoft Graph:  Application.ReadWrite.All, Application.ReadWrite.OwnedBy,  Directory.Read.All, Group.ReadWrite.All, Policy.Read.All, RoleManagement.ReadWrite.Directory, Sites.FullCo

Hi guys,If I want to achieve the best dedup efficiancy, I have to set the Max Open Files in the Commvault subclient(s) of an Oracle Instance to 1.Otherwise, RMAN will multiplex the number of files allowed into one channel / stream, which leads to poor dedupe ratio for the backups of this databases.Is there an option to influence the parameter of default subclient during instance creation when a new instance is discovered ?Setting the amount of streams and restricting the MaxOpenFiles might be beneficial when adding larger amount of Instances to the environment and where disk or cloud is the primary backup destination.rgdsKlaus

We are planning an upgrade from 11.32 to 11.36. With the deprecation of the web console, does this mean that the legacy Compliance Search (not the CommandCenter version), will disappear? We have users still using that, and don’t see many benefits to the CommandCenter version.

Hello Team,Support Portal is unavailable, again. It always seems to happen whenever I am in the middle of a Change that isn’t going to plan. I am beginning to take it personally :) 

How to produce a Restore report specifically source media is TAPE?  Please note that the SP has the Disk primary and Tape secondary.  Attempted to produce one but unfortunately 'source' media is always disk. 

Hi,what is the best way to allow a user, that created a credential vault, to add further user or groups to this new created vault ?the user is per default, not allowed to change the security settings of his own vault entry.the vault should be made available to other user after it has been created ba a restricted user.the only option I found to achieve this, is to grant the global → change security settings permission on the commcell level.But this will allow the user to change other objects permissions as well, what is not desired.(CommCell is running with CV11.40)rgdsKlaus 

Hi everyone,I am looking for advice in associating VM's on a shared vCenter to different companies. We have a big MSP vCenter where a lot of our customers have their VM environment that we protect with Commvault.We currently use server groups that are associated to VM folders on the vCenter. The server group is associated to a company so the VM's are automatically associated to a company. This feels a bit of a workaround but it is working at the moment.I also saw thread Assignment of VM's to Companies which explains this solution with VM tags which is almost the same solution.As the referenced thread is 3 years old, is there a better way to do this? We tried adding the same vCenter multiple times to create different selections for companies but this does not work.Kind regards,Paul G

Hi, all Due business restrictions we cannot download 11.24 zipped package for Windows. Is possible to get a link like I received last time in March for 11.20? Thank you in advance. Best regards,George

Hello,Notes Database 9.0.x (IBM Domino 9.0.x Social Edition 64 bit) is not in list of supported versions for 11.36. and 11.40 agent versions (https://documentation.commvault.com/11.40/commcell-console/notes_database_system_requirements.html).Last it was mentioned as supported at least in 11.24. I need to upgrade agent from 11.24 to 11.36 or 11.40. Does anyone has practical experience, will it work?At same time  “IBM Domino 9.0.x Social Edition 64 bit” in not in Deprecation Notices list: https://documentation.commvault.com/11.40/software/deprecation_notices.htmlThank you! 

Hi,what is the best way to achieve, that a (restricted) user, who created a derived plan, gets the permission to change security settings of his new created plan ?I’d like/need to share the plan with all members of a specific user/secrity group.The plan should be accessible by all members of that groupthe system created Role: Plan Creator is automatically assigned, but this does not include the change security settings permissions and cannot be altered, since system created.(CommCell is running on CV11.40)rgdsKlaus

Hi All I have enabled the Multi person authorization - Restore request. The users I have in my environment only have very few permissions, only able to do backup and restores.Now that the above have been enabled, my users don’t see the request in the job controller in the Java Console even though I have placed them in the “User groups which can authorize the request”.If I look in the documentation under Multi person authorization - FAQ it states:3. Do users need special permissions to be an approver to authorize requests?No, users do not need any specific permissions to approve a request. Instead, they must belong to the user group configured as the approver group.FAQ for Multi-Person Authorization But still its not working, as the users cannot see the request. What am I missing, I guess some permissions anyway? Regards-Anders 

Hi,I’m using Microsoft CSVs for quite some time now, to setup shared libraries on block storage.My current setup on Windows 2025 (24H2) is now reporting an incompatible filter driver in the filesystem stack.Up to Windows 2022, I do not see this behaviour.The incompatible driver, leads to indirect I/Os against the Filesystems, which leads to a degradation in throughput and increase in CPU and network utilization on the MediaAgents.Is there an update available, fixing this in CV11.40 ?I’m currently using MR56 in the environment and deactivated the Ransomware Protection on the MediaAgents to avoid this.Once activated, the CVDLP filter driver gets active again and the ClusterVolumeState changes from direct to indirect due to incompatible filter driver.I faced a similar issue some 10 years ago with Version 11.6 of Commvault and Microsoft 2012R2, where this has been solved by Commvault with a patch/FixBRKlaus

Good morning,I'm trying to optimize the RAM usage on the Commserver. The Commserver is currently running on OS 2022 with SP 11.36 and has 80 GB of memory.At the moment, I consistently see memory usage of around 85%. SQL Server is using approximately 31 GB, while datacube.exe is using about 21 GB.The Commserver is also running indexing, which has 20 GB reserved, and SQL Server has 31 GB allocated.What would be the best way to reduce the overall RAM usage? Is 31 GB allocated to SQL Server too much?I understand that it's generally recommended to reserve about 50% of the total RAM for SQL Server, but I'd appreciate your advice on the optimal configuration in this case. What would happen if I reduced the amount of RAM allocated to indexing or to SQL Server? Are there any potential performance impacts or risks that I should be aware of?

We trying to configure webhook in commvault but it not able to configure, getting errror message “Invalid URL specified” Commvault is not accepting HTTP using HTPS but still failing. Please helpLogsMachine : CommserverFile    : WebServer.log 5172  102   07/01 15:05:33 ### admin API - Tid:c69a82a76864123c3e345a268fdd6bcb STARTED  POST [/Webhook] Console[AdminConsole] IP[10.xxx.xx.xxx]5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Error while encrypting string:5172  102   07/01 15:05:33 ### admin IsIPValid - Tid:c69a82a76864123c3e345a268fdd6bcb Sitelocalurl/LinkLocalUrl is provided5172  102   07/01 15:05:33 ### admin IsValidUrl - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid ip 10.xxx.xx.xxx5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid url specified: https://10.xxx.xx.xxx:9000/receive5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb request handling interr

Have a particular Linux server that I’ve enabled 1-Touch.  It is creating a folder INITRD in /tmp, and a file “initrd” in /tmp as well.  I presume this is part of the 1-Touch process, as I can see in the sr.log file references to the INITRD folder.  I was wondering if this is something that the backup process should clean up after it is done, or if there is a way to specify a different “tmp” folder for this operation.Also, in the sr.log I see “rm -f /tmp/initrd.img” but not “rm -f /tmp/initrd”.  The file that is left in /tmp has no .img extension.

Hello,I have been reviewing the Commvault Risk Analysis and Data Classification capabilities, and I have also performed some lab testing to better understand how the feature works.Based on the documentation and my testing, I understand that data can be classified using:Predefined Commvault classifiers Microsoft sensitivity labels/classifications Custom classifiers by providing a set of representative sample files (at least 50 files) for the document typeHowever, I have a question regarding a specific use case.What if an organization does not know what types of data it currently has and wants to discover and classify unknown data across its environment?The current classification methods seem to require either predefined categories or prior knowledge of the document types. In this scenario, how can Risk Analysis help identify and classify data that is not already known or defined?Am I missing a capability within Risk Analysis that addresses data discovery for unknown content. 

Hello everyone,I’m facing an issue while backing up production virtual machines hosted on Nutanix AHV using Commvault version 11.40.47, and I would appreciate your guidance.EnvironmentCommvault Version: 11.40.47 Hypervisor: Nutanix AHV Prism Element IP: 10.10.100.120 Commvault Access Node / Media Agent: Hostname: srv-CV-backup IP: 10.10.100.24 Issue DescriptionWhen starting a backup job:Commvault successfully discovers and lists all the VMs The backup job starts but fails before backing up any disks The issue occurs for all VMsError MessageError opening the disks for virtual machine [Win-SRV1].Access node [srv-CV-backup] is unable to mount NFS share [10.10.100.120:/PROD].Source: srv-backup, Process: JobManagerNotesThe latest Commvault version available to us is installed (11.40.47) VM discovery works correctly The failure seems related to mounting the NFS datastore from NutanixHas anyone encountered a similar issue with Commvault and Nutanix AHV?Are there any specific NFS permissions,

Hi,I have built a brand new 11.40 CommServe and used the CS recovery tool to dump & upgrade my 11.32 database.I went to run the asbuild guide to document my new build but I see it need the Web Console feature.I try to push this out as getting “Install Software Skipped. Software selected for install is not supported on this client.”   As Web Console is deprecated in 11.40 why do the BOL tell you its needed and secondly is there another way for me to generate an asbuild doc. Thanks  

We trying to configure webhook in commvault but it not able to configure, getting errror message “Invalid URL specified” Commvault is not accepting HTTP using HTPS but still failing. Please helpLogs @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@Machine : CommserverFile    : WebServer.log@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@5172  102   07/01 15:05:33 ### admin API - Tid:c69a82a76864123c3e345a268fdd6bcb STARTED  POST [/Webhook] Console[AdminConsole] IP[10.xxx.xx.xxx]5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Error while encrypting string:5172  102   07/01 15:05:33 ### admin IsIPValid - Tid:c69a82a76864123c3e345a268fdd6bcb Sitelocalurl/LinkLocalUrl is provided5172  102   07/01 15:05:33 ### admin IsValidUrl - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid ip 10.xxx.xx.xxx5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid url specified: https://10.xxx.xx.xxx:9000/

Hello I am planning to upgrade the CommServe from SP 11.36 to SP 11.40.The CommServe and Web Server are installed on the same VM, running Windows Server 2022 with SQL Server 2022.Is it sufficient to start the upgrade directly from the CommCell Console, or would you recommend using the Media Kit instead?Also, are there any specific things I should pay close attention to during the upgrade process?

Can the Exchange Mailbox Agent be associated with a Storage Policy configured for Spool Copy (on the Primary Copy)? Would recoveries be impacted?

Issue Summary:The MongoDB restore operation completes successfully from the Commvault side. The restore job finishes with a successful status, and the database files are restored correctly.Observed behavior: The mongod process starts automatically after the restore. MongoDB is accessible using mongosh. Authentication works successfully. The database is operational. However, the MongoDB service is shown as: systemctl status mongodActive: inactive (dead) The mongod process is running independently: ps -ef | grep mongod The process is not associated with the mongod.service. Additional observations: The restore logs indicate that CVMongoDBUtil launches the recovery process. The MongoDB process starts successfully but is not managed by systemd. Starting the service manually using: systemctl start mongod changes the service state to: Active: active (running) Temporary workaround implemented: A post-recovery script was configured: #!/bin/bashsleep 30if pgrep mongod >/dev/nu