NetBackup10001_Logging_RefGd
NetBackup10001_Logging_RefGd
Reference Guide
10.0.0.1
Contents
■ About logging
■ Logging levels
About logging
Note: The Logging properties can be configured on the NetBackup web UI. On
the left pane, select Host > Host properties. Depending on the host to be
configured, select the Primary Server, Media Servers, or Clients. From the Actions
menu, select the Edit option, and then click Logging.
The logging settings determine the behavior for NetBackup logging on the primary
server, media server, and the clients:
■ Overall logging level or global logging level for all NetBackup processes.
■ Overrides for the specific processes that use legacy logging.
Using logs 8
About logging
Property Description
Global logging level This setting establishes a global logging level for all processes that are set to Same
as global.
The Global logging level affects the legacy and unified logging level of all NetBackup
and Enterprise Media Manager (EMM) processes on the server or client. This setting
does not affect the following logging processes:
■ PBX logging
See the NetBackup Troubleshooting Guide for more information on how to access
the PBX logs.
■ Media and device management logging (vmd, ltid, avrd, robotic daemons, media
manager commands)
See “Directory names for legacy debug logs for media and device management”
on page 45.
Process specific overrides These settings let you override the logging level for the specific processes that use
legacy logging.
Debug logging levels for These settings let you manage the logging level for the specific services that use unified
NetBackup services logging.
Using logs 9
Logging levels
Property Description
Logging for critical The option lets you enable logging for the critical processes:
processes
■ Primary server processes: bprd and bpdbm.
■ Media server processes: bpbrm, bptm, and bpdm.
■ Client process: bpfis
■ If you enable Logging for critical processes, also enable the option Keep logs
up to GB. If you disable this option it may adversely affect NetBackup operations.
■ This option sets the log retention to the default log size.
■ Clicking Defaults does not modify the Logging for critical processes or the Keep
logs up to GB options.
■ To disable the logging for critical processes, modify the logging levels for those
processes.
Keep logs for days Specifies the length of time NetBackup keeps information from the error catalog, job
catalog, and debug logs. Note that NetBackup derives its reports from the error catalog.
The logs can consume a large amount of disk space, so do not keep the logs any
longer than necessary. The default is 28 days.
Keep logs up to GB Specifies the size of the NetBackup logs that you want to retain. When the NetBackup
log size grows to this value, the older logs are deleted.
Keep Vault logs for If NetBackup Vault is installed, select the number of days to keep the Vault session
directories, or select Forever.
Logging levels
You can choose to apply the same logging level for all NetBackup processes. Or,
you can select logging levels for specific processes or services.
Same as global The process uses the same logging level as the Global logging level.
Minimum logging (default) A small amount of information is logged for the process.
Use this setting unless advised otherwise by Veritas Technical Support. Other settings
can cause the logs to accumulate large amounts of information.
Levels 1 through 4 Progressively more information is logged at each level for the process.
Database logging level The logging level for database agent logs. X
For details on which logs to create and refer
to, see the guide for the specific agent.
Service Description
Policy Execution Manager The Policy Execution Manager (NBPEM) creates policy and client tasks and
determines when jobs are due to run. If a policy is modified or if an image expires,
NBPEM is notified and the appropriate policy and client tasks are updated.
Job Manager The Job Manager (NBJM) accepts the jobs that the Policy Execution Manager
submits and acquires the necessary resources.
Resource Broker The Resource Broker (NBRB) makes the allocations for storage units, tape drives,
client reservations.
processname_VERBOSE = 0
processname_VERBOSE = -2
Keep logs up to GB Limits the size of unified and legacy logs. For a NetBackup This option is available in the
server, the recommended value is 25 GB or greater. For host property Logging
clients, the recommended value is 5 GB or greater. settings.
NumberOfLogFiles Limits the number of unified log files that you want to retain vxlogcfg
for a NetBackup process.
MaxLogFileSizeKB Prevents the unified log files from becoming too large. vxlogcfg
and other
When a file size or time setting is reached, the current log
RolloverMode options
file is closed. New log messages for the logging process are
written or “rolled over” to a new log file.
Keep logs for days Limits the days for which NetBackup retains for unified and This option is available in the
legacy logs. host property Logging
settings.
See “Limit the size and retention of legacy logs” on page 47.
Using logs 13
Changing the logging levels
MAX_LOGFILE_SIZE Limit the legacy log size and the number of legacy log files bpsetconfig
and that are retained.
MAX_NUM_LOGFILES
See “Limit the size and retention of legacy logs” on page 47.
Log pruning
All logs are retained until the log size reaches the high water mark, that is, 95% of
the Keep logs up to GB value. NetBackup verifies the log size every 10 minutes.
When the log size reaches the high water mark, NetBackup begins to delete older
logs. NetBackup stops deleting logs when the log size reaches the low water mark,
85% of the Keep logs up to GB value.
If both Keep logs up to GB and Keep logs for days are selected, the logs are
pruned based on the condition that occurs first.
You can verify the log pruning behavior in NetBackup by viewing the logs at the
following location:
install_path\NetBackup\logs\nbutils
/usr/openv/logs/nbutils
3 In the right pane, select the server or client. Then, double-click to view the
properties.
4 In the left pane, click Logging.
5 In the Global logging level list, select the value that you want.
6 Click OK.
3 Restart the daemons and services or run the command verbose option, if
available.
Note: You can control the logging level for the Bare Metal Restore process
(bmrsavecfg) with the vxlogcfg command.
Windows install_path\NetBackup\logs
UNIX /usr/openv/logs
Note: Only the following types of users can access the logs: root and service users
in Linux systems, and users present in the administrators group of Windows systems.
You can access logging controls in Logging host properties. You can also manage
unified logging with the following commands:
vxlogmgr Manages the log files that the products that support unified logging
generate.
# mkdir /upload
2 Copy unified logs (for NetBackup only) to the /upload directory by using the
following command:
Example output:
# cd /upload
ls
Example output:
51216-111-2202872032-050125-0000000.log
51216-116-2202872032-050125-0000000.log
51216-117-2202872032-050125-0000000.log
51216-118-2202872032-050125-0000000.log
51216-132-2202872032-050125-0000000.log
51216-157-2202872032-050125-0000000.log
Application log Application log messages include informational, warning, and error
messages messages. They are always logged and cannot be disabled. These
messages are localized.
Diagnostic log Diagnostic log messages are the unified logging equivalent of the legacy
messages debug log messages. They can be issued at various levels of detail
(similar to verbose levels in legacy logging). These messages are
localized.
Debug log Debug log messages are intended primarily for Veritas engineering.
messages Like diagnostic messages, they can be issued at various levels of detail.
These messages are not localized.
/usr/openv/logs/nbpem/51216-116-2201360136-041029-0000000000.log
Table 1-7 Description of the file name format for unified logging
51216 Product ID Identifies the product. The NetBackup product ID is 51216. The
product ID is also known as the entity ID.
116 Originator ID Identifies the log writing entity, such as a process, service,
script, or other software. The number 116 is the originator ID
of the nbpem process (the NetBackup policy execution
manager).
2201360136 Host ID Identifies the host that created the log file. Unless the file was
moved, this ID is the host where the log resides.
041029 Date Shows the date when the log was written in YYMMDD format.
0000000000 Rotation Identifies the numbered instance of a log file for a given
originator. The rollover number (rotation) indicates the instance
of this log file. By default, log files roll over (rotate) based on
file size. If the file reaches maximum size and a new log file is
created for this originator, the new file is designated
0000000001.
The log configuration file specifies the name of the directories where the log files
for originator IDs are written. These directories and the log files that they hold are
written to the following directory, except as noted in the following:
See “Originator IDs for the entities that use unified logging” on page 19.
Windows install_path\NetBackup\logs
UNIX /usr/openv/logs
Table 1-8 Originator IDs for the server entities that use unified logging
103 pbx_exchange The Private Branch Exchange (PBX) service provides single-port access
to clients outside the firewall that connect to NetBackup services. Service
name: VRTSpbx. It writes logs to /opt/VRTSpbx/log (UNIX) or
install_path\VxPBX\log (Windows). The PBX product ID is 50936.
111 nbemm The Enterprise Media Manager (EMM) is a NetBackup service that
manages the device and the media information for NetBackup. It runs
only on the master server.
Using logs 20
About unified logging
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
116 nbpem The NetBackup Policy Execution Manager (nbpem) creates policy and
client tasks and determines when jobs are due to run. It runs only on the
master server.
117 nbjm The NetBackup Job Manager (nbjm) accepts the jobs that the Policy
Execution Manager submits and acquires the necessary resources. It
runs only on the master server.
118 nbrb The NetBackup Resource Broker (nbrb) maintains a cache list of
available resources. It uses that list to locate the physical and the logical
resources that are required for a backup or a tape restore. It initiates a
SQL call to nbemm to update the database, and then passes the allocation
information to nbjm. It runs only on the master server.
119 bmrd The NetBackup Bare Metal Restore (BMR) master server daemon.
121 bmrsavecfg The BMR Save Configuration is a data collection utility that runs on the
NetBackup client, not the server.
122 bmrc The BMR Client Utility originates on the BMR boot server and runs on
the restoring client. UNIX clients use it to communicate to the BMR
master server during a restore.
124 bmrcreatefloppy The BMR commands that create floppy disks use the BMR Create Floppy
utility. The utility runs on the BMR boot server and is Windows only.
125 bmrsrt The BMR Create SRT utility creates a shared resource tree. It runs on
the BMR boot server.
126 bmrprep The BMR Prepare to Restore utility prepares the BMR servers for a client
restoration.
127 bmrsetup The BMR Setup Commands utility sets up BMR installation, configuration,
and upgrade processes.
128 bmrcommon The BMR Libraries and Common Code catalog provides log messages
to the BMR libraries.
129 bmrconfig The BMR Edit Configuration utility modifies the client configuration.
130 bmrcreatepkg The BMR Create Package utility adds Windows drivers, service packs,
and hotfixes to the BMR master server for restore operations.
Using logs 21
About unified logging
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
131 bmrrst The BMR Restore utility restores Windows BMR clients. It runs on the
restoring client for Windows systems only.
132 nbsl The NetBackup Service Layer facilitates the communication between
the NetBackup graphical user interface and NetBackup logic. nbsl is
required to run NetBackup OpsCenter, an application that manages and
monitors multiple NetBackup environments. This process runs only on
the master server.
134 ndmpagent The NDMP agent daemon manages NDMP backups and restores. It
runs on the media server.
137 libraries The libraries control the logging level in the NetBackup libraries. The
application and the diagnostic messages are for customer use; the debug
messages are intended for Veritas engineering.
140 mmui The media server user interface is used for the Enterprise Media Manager
(EMM).
142 bmrepadm The BMR External Procedure process manages the BMR external
procedures that are used during a restore operation.
143 mds The EMM Media and Device Selection process manages the media
selection component and device selection component of the Enterprise
Media Manager (EMM).
151 ndmp The NDMP message log (ndmp) handles NDMP protocol messages,
avrd, and robotic processes.
154 bmrovradm The BMR Override Table Admin Utility manages the custom override
functions for Bare Metal Restore.
Using logs 22
About unified logging
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
156 ace The NBACE process controls the logging level in the (ACE/TAO) CORBA
components for any process that uses a CORBA interface. The default
level is 0 (only important messages are logged). This logging is intended
for Veritas engineering.
163 nbsvcmon The NetBackup Service Monitor monitors the NetBackup services that
run on the local computer and tries to restart a service that unexpectedly
terminates.
166 nbvault The NetBackup Vault Manager manages NetBackup Vault. nbvault
must be running on the NetBackup Vault server during all NetBackup
Vault operations.
178 dsm The Disk Service Manager (DSM) performs set and get operations on
disk storage and disk storage units.
199 nbftsrvr The Fibre Transport (FT) server process runs on the media servers that
are configured for the NetBackup Fibre Transport. On the server side of
the FT connection, nbftsrvrcontrols data flow, processes SCSI
commands, manages data buffers, and manages the target mode driver
for the host bus adapters. nbftsrvr is part of SAN client.
200 nbftclnt The Fibre Transport (FT) client process runs on the client and is part of
SAN Client.
201 fsm The FT Service Manager (FSM) is a component of the Enterprise Media
Manager (EMM) and is part of SAN Client.
202 stssvc The Storage service manages the storage server and runs on the media
server.
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
219 rsrcevtmgr The Resource Event Manager (REM) is a CORBA loadable service that
runs inside nbemm. REM works with the Disk Polling Service to monitor
free space and volume status, and to watch for disk-full conditions.
221 mpms The Media Performance Monitor Service (MPMS) runs on every media
server within RMMS and gathers CPU load and free memory information
for the host.
222 nbrmms Remote monitoring and Management Service (RMMS) is the conduit
through which EMM discovers and configures disk storage on media
servers.
226 nbstserv The Storage services controls the lifecycle image duplication operations.
230 rdsm The Remote Disk Service Manager interface (RDSM) runs within the
Remote Manager and Monitor Service. RDMS runs on media servers.
231 nbevtmgr The Event Manager Service provides asynchronous event management
services for cooperating participants.
248 bmrlauncher The BMR Launcher Utility in the Windows BMR Fast Restore image
configures the BMR environment.
254 SPSV2RecoveryAsst Recovery Assistant for SharePoint Portal Server for NetBackup clients.
272 expmgr The Expiration Manager handles the capacity management and the
image expiration for storage lifecycle operations.
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
Table 1-8 Originator IDs for the server entities that use unified logging
(continued)
387 nbrntd NetBackup Remote Network Transport. If multiple backup streams run
concurrently, the Remote Network Transport Service writes a large
amount of information to the log files. In such a scenario, set the logging
level for OID 387 to 2 or less.
Table 1-9 vxlogcfg options that control the rollover of the unified log files
Option Description
MaxLogFileSizeKB Specifies the maximum size that is allowed for the log file (in
kilobytes) before rollover occurs, if the RolloverMode is set
to FileSize.
RolloverAtLocalTime Specifies the time of day at which the log file is rolled over,
if the RolloverMode is set to LocalTime.
RolloverPeriodInSeconds Specifies a period of time in seconds after which the log file
is rolled over, if the RolloverMode is set to Periodic.
MaxLogFileSizeKB or Specifies that the log file rollover occurs whenever the file
RolloverAtLocalTime size limit or the local time limit is reached, whichever is first.
MaxLogFileSizeKB or Specifies that the log file rollover occurs whenever the file
RolloverPeriodInSeconds size limit or the periodic time limit is reached, whichever is
first.
By default, log file rollover is based on a file size of 51200 KB. When a log file
reaches 51200 KB in size, the file closes and a new log file opens.
The following example sets the NetBackup (prodid 51216) rollover mode to
Periodic.
The previous example uses the vxlogcfg command with the RolloverMode option.
It sets rollover mode for nbpem (originator ID 116) to Periodic. It also sets the
interval until the next nbpem log file rollover to 24 hours (86400 seconds).
In the following example, the file names show the log file rollover with the rotation
ID incremented:
/usr/openv/logs/nbpem/51216-116-2201360136-041029-0000000000.log
/usr/openv/logs/nbpem/51216-116-2201360136-041029-0000000001.log
/usr/openv/logs/nbpem/51216-116-2201360136-041029-0000000002.log
In addition, you can use log file rotation with the following:
■ Logs for the server processes that use unified logging
See “Originator IDs for the entities that use unified logging” on page 19.
■ Certain legacy logs
■ The unified logging files that the Bare Metal Restore process bmrsavecfg creates
Limit the number of log Specify the maximum number of log files that NetBackup retains.
files When the number of log files exceeds the maximum, the oldest log
files become eligible for deletion during log cleanup. The
NumberOfLogFiles option for the vxlogcfg command defines
that number.
In the following example, the maximum number of log files that are
allowed for each of the unified logging originators in the NetBackup
(product ID 51216) is 8000. When the number of log files exceeds
8000 for a particular originator, the oldest log files become eligible
for deletion during log cleanup.
Specify the number of Use the Keep logs for days property to specify the maximum
days the log files are number of days logs are kept. When the maximum number of days
kept is reached, the unified logs and legacy logs are automatically
deleted.
Explicitly delete the log To initiate recycling and delete the log files, run the following
files command:
# vxlogmgr -a -d
If the vxlogcfg LogRecycle option is ON (true), the Keep logs for days setting
is disabled for unified logs. In this case, unified logging files are deleted when their
number (for a particular originator) exceeds the number that the NumberOfLogFiles
option specifies on the vxlogcfg command.
Using logs 29
About unified logging
UNIX /usr/openv/logs
Windows install_path\NetBackup\logs
STDATE Long Integer or string Provide the start date in seconds or STDATE = 98736352
in the locale-specific short date and
STDATE = '4/26/11 11:01:00
time format. For example, a locale
AM'
can have the format 'mm/dd/yy
hh:mm:ss AM/PM'
ENDATE Long Integer or string Provide the end date in seconds or ENDATE = 99736352
in the locale-specific short date and
ENDATE = '04/27/11 10:01:00
time format. For example, a locale
AM'
can have the format 'mm/dd/yy
hh:mm:ss AM/PM'
1 = WARNING
2 = ERR
3 = CRIT
4 = EMERG
Example Description
(PRODID == 51216) && ((PID == 178964)|| ((STDATE == Retrieves the log file message for the
'2/5/15 09:00:00 AM') && (ENDATE == '2/5/15 NetBackup product ID 51216 between
12:00:00 PM')) 9AM and 12PM on 2015-05-02.
((prodid = 'NBU') && ((stdate >= ‘11/18/14 Retrieves the log messages for the
00:00:00 AM’) && (endate <= ‘12/13/14 12:00:00 PM’))) || NetBackup product NBU between
((prodid = 'BENT') && ((stdate >= ‘12/12/14 00:00:00 2014-18-11 and 2014-13-12 and the log
AM’) && (endate <= ‘12/25/14 12:00:00 PM’))) messages for the NetBackup product
BENT between 2014-12-12 and
2014-25-12.
Using logs 31
About unified logging
Example Description
(STDATE <= ‘04/05/15 0:0:0 AM’) Retrieves the log messages that were
logged on or before 2015-05-04 for all
of the installed Veritas products.
Note: Only the following types of users can access the logs: root and service users
in Linux systems, and users present in the administrators group of Windows systems.
Item Example
Display specific Display the log messages for NetBackup (51216) that show only the date, time, message
attributes of the log type, and message text:
messages
vxlogview --prodid 51216 --display D,T,m,x
Display the latest log Display the log messages for originator 116 (nbpem) that were issued during the last 20
messages minutes. Note that you can specify -o nbpem instead of -o 116:
Display the log Display the log messages for nbpem that were issued during the specified time period:
messages from a
specific time period # vxlogview -o nbpem -b "05/03/15 06:51:48 AM"
-e "05/03/15 06:52:48 AM"
Using logs 32
About unified logging
Item Example
Display results faster You can use the -i option to specify an originator for a process:
# vxlogview -i nbpem
The vxlogview -i option searches only the log files that the specified process (nbpem)
creates. By limiting the log files that it has to search, vxlogview returns a result faster. By
comparison, the vxlogview -o option searches all unified log files for the messages that
the specified process has logged.
Note: If you use the -i option with a process that is not a service, vxlogview returns the
message "No log files found." A process that is not a service has no originator ID in the file
name. In this case, use the -o option instead of the -i option.
The -i option displays entries for all OIDs that are part of that process including libraries (137,
156, 309, etc.).
Search for a job ID You can search the logs for a particular job ID:
The jobid= search key should contain no spaces and must be lowercase.
When searching for a job ID, you can use any vxlogview command option. This example
uses the -i option with the name of the process (nbpem). The command returns only the
log entries that contain the job ID. It misses related entries for the job that do not explicitly
contain the jobid=job_ID.
Item Example
List the log files List all unified log files for the nbrb service:
# vxlogmgr -s -o nbrb
/usr/openv/logs/nbrb/51216-118-1342895976-050503-00.log
/usr/openv/logs/nbrb/51216-118-1342895976-050504-00.log
/usr/openv/logs/nbrb/51216-118-1342895976-050505-00.log
Total 3 file(s)
Using logs 33
About unified logging
Item Example
Delete the oldest log If the vxlogcfg NumberOfLogFiles option is set to 1, the following example deletes the
files two oldest log files for the nbrb service:
Delete the newest log Delete all the unified log files that NetBackup created in the last 15 days:
files
# vxlogmgr -d --prodid 51216 -n 15
Make sure that you roll over (rotate) the log files before you recycle them.
Delete the log files for Delete all unified log files for originator nbrb:
a specific originator
# vxlogmgr -d -o nbrb
Make sure that you roll over (rotate) the log files before you recycle them.
Delete all the log files Delete all unified log files for NetBackup:
# vxlogmgr -d -p NB
Make sure that you roll over (rotate) the log files before you recycle them.
Using logs 34
About unified logging
Item Example
Control the number of You can use the vxlogmgr command with the vxlogcfg command’s NumberOfLogFiles
log files option to manually delete log files.
For example, the NumberOfLogFiles option is set to 2, you have 10 unified logging files,
and cleanup has not occurred. Enter the following to keep the two most recent log files and
delete the rest for all originators:
# vxlogmgr -a -d
The following command keeps the two most recent log files of all PBX originators:
# vxlogmgr -a -d -p ics
The following deletes the older log files for the nbrb service only:
# vxlogmgr -a -d -o nbrb
Control disk space Periodically run the vxlogmgr -a -d command (such as through a cron job) to delete
usage logs and monitor the disk space that unified logging uses.
The disk space that a given originator uses can be calculated as follows:
The total disk space that unified logs consume is the sum of the disk space that each originator
consumes. If none of the originators override the NumberOfLogFiles and
MaxLogFileSizeKB settings, then the total disk space that unified logging consumes is as
follows:
Use the vxlogcfg command to list the current unified logging settings.
For example, assume the following:
To calculate the total disk space that unified logging consumes, insert the values from the
example into the previous formula. The results are as follows:
Item Example
Set the maximum log By default, the maximum log file size in unified logging is 51200 KB. When a log file reaches
file size 51200 KB, the file closes and a new log file opens.
You can change the maximum file size with the MaxLogFileSizeKB option. The following
command changes the default maximum log size to 100000 KB for the NetBackup product:
MaxLogFileSizeKB can be set per originator. An originator that is not configured uses the
default value. The following example overrides the default value for service nbrb (originator
ID 118).
Set log recycling The following example sets automatic log file deletion for nbemm logs (originator ID 111):
This example sets the nbemm logging rollover mode to file size, and turns on log recycling.
When the number of log files exceeds 999, the oldest log file is deleted. EXAMPLE 5 shows
how to control the number of log files.
Set debug level and The following example sets the default debug level and diagnostic level of product ID
diagnostic level NetBackup (51216):
Item Example
List the unified logging The following vxlogcfg example shows how to list the active unified logging settings for a
settings given originator (the nbrb service). Note that MaxLogFileSizeKB, NumberOfLogFiles,
and RolloverMode are included in the output.
# vxlogcfg -l -o nbrb -p NB
permissions that applies to all the OIDs. For folder permissions, the
Default.LogFilePermissions is considered.
The folder and file permissions do not change instantly after running the vxlogcfg
command. If you want to apply the permissions immediately, restart the NetBackup
services. For more information on restarting the services, see this article. The file
and folder permissions are applied during the next log rollover cycle that depends
on the length of the logs and the configured log file sizes. The maximum rollover
period is one day. So, in this case, the new permissions reflects after one day afer
changing the file permissions. The permissions of existing log files in the system
are not changed.
Here are some examples for changing the default log permissions:
■ These two example commands change file permissions to 644 for all the
components. The folder gets additional execute permissions (755).
■ /usr/openv/netbackup/bin/vxlogcfg -a --prodid 51216 -o ALL -s
LogFilePermissions=644
■ To change the permissions for any originator ID, use the following example
command:
/usr/openv/netbackup/bin/vxlogcfg -a --prodid 51216 --orgid 111
-s LogFilePermissions=644
This command applies the 644 permission to the originator ID 111, which
represents nbemm. For all other component orgid, refer to
/usr/openv/netbackup/nblog.conf.
■ To change permissions for a PBX log in the icsul.conf file, use the following
example command:
/usr/openv/netbackup/bin/vxlogcfg -a --prodid 50936 -o 103 -s
LogFilePermissions=644
If you want to apply the permissions immediately, restart the PBX services. For
more information on restarting the services, see this article.
Using logs 38
About legacy logging
Windows install_path\NetBackup\logs
install_path\Volmgr\debug
UNIX /usr/openv/netbackup/logs
/usr/openv/volmgr/debug
To use legacy logging, a log file directory must exist for a process. If the directory
is not created by default, you can use the Logging Assistant or the mklogdir batch
files to create the directories. Or, you can manually create the directories. When
logging is enabled for a process, a log file is created when the process begins.
Each log file grows to a certain size before the NetBackup process closes it and
creates a new log file.
You can use the following batch files to create all of the log directories:
■ Windows: install_path\NetBackup\Logs\mklogdir.bat
■ UNIX: /usr/openv/netbackup/logs/mklogdir
Follow these recommendations when you create and use legacy log folders:
■ Do not use symbolic links or hard links inside legacy log folders.
■ If any process runs for a non-root or non-admin user and there is no logging
that occurs in the legacy log folders, use the mklogdir command to create a
folder for the required user.
■ To run a command line for a non-root or non-admin user (troubleshooting when
the NetBackup services are not running), create user folders for the specific
command line. Create the folders either with the mklogdir command or manually
with the non-root or non-admin user privileges.
Using logs 39
About legacy logging
More information
See the NetBackup Commands Reference Guide for a complete description about
the mklogdir command.
See “Directory names for legacy debug logs for servers ” on page 43.
See “Directory names for legacy debug logs for media and device management”
on page 45.
See “File name format for legacy logging” on page 42.
Windows install_path\NetBackup\Logs\mklogdir.bat
UNIX /usr/openv/netbackup/logs/mklogdir
bpclimagelist Command-line utility that produces a status report on client NetBackup images or removable
media.
bpclntcmd Command-line utility on the clients that test NetBackup system functionality and enables Fibre
Transport services.
bphdb Program that starts a script to back up a database on a NetBackup database agent client.
See the system administrator's guide for the appropriate NetBackup database agent for more
information.
Using logs 40
About legacy logging
Table 1-15 UNIX client processes that use legacy logging (continued)
bpjava-msvc The NetBackup Java application server authentication service that inetd starts during the
startup of the NetBackup Java interface applications. This program authenticates the user that
started the application.
bpjava-usvc The NetBackup program that bpjava-msvc starts upon successful logon through the logon
dialog box that is presented when a NetBackup Java Backup, Archive, and Restore (BAR)
interface is started. This program services all requests from the Java user interfaces on the
host where bpjava-msvc is running.
bplist Program that lists backed up and archived files. Also useful to debug bp.
bpmount Program that determines the local mount points and wildcard expansion for multiple data
streams.
bporaexp Command-line program on clients to export Oracle data in XML format. Communicates with
bprd on the server.
bporaexp64 64-bit command-line program on clients to export Oracle data in XML format. Communicates
with bprd on the server.
bporaimp Command-line program on clients to import Oracle data in XML format. Communicates with
bprd on the server.
bporaimp64 64-bit command-line program on clients to import Oracle data in XML format. Communicates
with bprd on the server.
bptestnetconn Tests and analyzes DNS and connectivity problems with any specified list of hosts, including
the server list in the NetBackup configuration.
db_log For more information on these logs, see the NetBackup guide for the database-extension
product that you use.
mtfrd These logs have information about the mtfrd process that is used for phase 2 imports and
restores of the Backup Exec media.
Table 1-15 UNIX client processes that use legacy logging (continued)
user_ops The user_ops directory is created during the install of NetBackup on all servers and clients.
The NetBackup Java interface programs use this directory for temporary files and for job and
progress log files that the Backup, Archive, and Restore program (jbpSA) generates. This
directory must exist for successful operation of any of the Java programs and must have public
read, write, and run permissions. This directory contains a directory for every user that uses
the Java programs.
In addition, on NetBackup Java capable platforms, the NetBackup Java interface log files are
written in a subdirectory that is called nbjlogs. All of the files that are in the user_ops directory
hierarchy are removed according to the setting of the KEEP_LOGS_DAYS configuration option.
bpinetd All Windows clients Client service logs. These logs have information on the
bpinetd32 process.
bparchive All Windows clients Archive program that is run from the command line.
bpbackup All Windows clients The backup program that is run from the command line.
bpbkar All Windows clients Backup and archive manager. These logs have information on
the bpbkar32 process.
bpcd All Windows clients NetBackup client daemon or manager. These logs have
information on communications between the server and client.
bplist All Windows clients List program that is run from the command line.
bpmount All Windows clients The program that is used to collect drive names on the client for
multistreaming clients.
bprestore All Windows clients The restore program that is run from the command line.
bptestnetconn All Windows clients The program that performs several tasks that help you test and
analyze DNS and connectivity problems with any specified list
of hosts, including the server list in the NetBackup configuration.
tar All Windows clients tar processing. These logs have information about the tar32
process.
user_ops All Windows clients The user_ops directory is created during the install of
NetBackup on all servers and clients. The NetBackup Java
interface programs use it for the following: temporary files and
for job and progress log files that the Backup, Archive, and
Restore program (jbpSA) generates. This directory must exist
for successful operation of any of the Java programs and must
have public read, write, and run permissions. user_ops contains
a directory for every user that uses the Java programs.
user_name.mmddyy_nnnnn.log
user_name The name of the user in whose context the process runs, as follows:
mmddyy The month, day, and year on which NetBackup created the log file.
nnnnn The counter or the rotation number for the log file. When the counter exceeds
the setting for number of log files, the oldest log file is deleted.
The new folder structure for non-root or non-admin invoked process logs is created
under process log directory name.
For example,
/usr/openv/netbackup/logs/tar/root.031020_00001.log
/usr/openv/netbackup/log/tar/usr1/usr1.031020_00001.log
Here, for non-root user usr1, a non-root username directory is created under the
respective NetBackup processes.
Windows install_path\NetBackup\logs
UNIX /usr/openv/netbackup/logs
bpcd NetBackup client daemon or manager. The NetBackup Client service starts this
process.
bpdbm NetBackup Database Manager. This process runs only on master servers. On
Windows systems, it is the NetBackup Database Manager service.
bpjava-msvc The NetBackup Java application server authentication service that is started when
the NetBackup interface applications start. On UNIX servers, inetd starts it. On
Windows servers, the Client Services service starts it.
bpjava-susvc The NetBackup program that bpjava-msvc starts upon successful logon through
the logon dialog box that is presented when a NetBackup interface starts. This
program services all requests from the Java user interfaces on the NetBackup master
or media server host where the bpjava-msvc program runs (all Windows platforms).
bprd NetBackup Request Daemon. On Windows systems, this process is called the
NetBackup Request Manager service.
bpsynth The NetBackup process for synthetic backup. nbjm starts bpsynth. bpsynth runs
on the master server.
nbatd Authentication daemon (UNIX and Linux) or service (Windows). nbatd authenticates
access to interfaces of NetBackup services or daemons.
nbazd Authorization daemon (UNIX and Linux) or service (Windows). nbazd authorizes
access to interfaces of NetBackup services or daemons.
You must enable system logging to troubleshoot ltid or robotic software. See the
syslogd man page.
Using logs 45
About legacy logging
user_ops The user_ops directory is created during the install of NetBackup on all servers and
clients. NetBackup interface programs use it for the following: temporary files and
for job and progress log files that the Backup, Archive, and Restore program
(jbpSA) generates. This directory must exist for successful operation of any of the
Java programs and must have public read, write, and execute permissions. user_ops
contains a directory for every user that uses the Java programs.
The NetBackup Java interface log files are written in the nbjlogs subdirectory. All
files in the user_ops directory hierarchy are removed according to the setting of the
KEEP_LOGS_DAYS configuration option.
vnetd The Veritas network daemon, used to create firewall-friendly socket connections.
Started by the inetd(1M) process.
Note: Logging occurs in either the /usr/openv/logs directory or the
/usr/openv/netbackup/logs if the vnetd directory exists there. If the vnetd
directory exists in both locations, logging occurs only in
/usr/openv/netbackup/logs/vnetd.
Directory names for legacy debug logs for media and device
management
The following directories enable legacy logging for the media management processes
and device management processes. NetBackup creates 1 log per day in each of
the debug directories. Each directory corresponds to a process. Unless it is noted,
each directory should be created under the following directory.
Windows install_path\Volmgr\debug
UNIX /usr/openv/volmgr/debug
acsssi UNIX only. Debug information on transactions between NetBackup and the StorageTek ACSLS
server.
daemon Debug information for vmd (NetBackup Volume Manager service, Windows) and its associated
processes (oprd and rdevmi). Stop and restart vmd after creating the directory.
Using logs 46
About legacy logging
Table 1-18 Media and device management legacy debug logs (continued)
ltid Debug information on ltid, the Media Manager device daemon (UNIX), or on the NetBackup
Device Manager service (Windows), and on avrd. Stop and restart ltid after creating the
directory.
reqlib Debug information on the processes that request media management services from vmd or EMM.
Stop and restart vmd after creating the directory.
robots Debug information on all robotic daemons, which includes tldcd, tl8cd, and tl4d daemons. Stop
and restart robotic daemons.
tpcommand Debug information for device configuration, including the tpconfig and the tpautoconf
commands and the NetBackup Administration Console.
vmscd Debug information for the NetBackup Status Collection daemon. Stop and restart vmscd after
creating the directory.
Warning: High verbose values can cause debug logs to become very large.
Using logs 47
About legacy logging
Windows install_path\Volmgr\
UNIX /usr/openv/volmgr/
DAYS_TO_KEEP_LOGSin vm.conf
Controls log file rotation for media and device management legacy logs. The default
is 30 days. The vm.conf file is located in install_path\Volmgr\ or
/usr/openv/volmgr/.
Errors are logged with LOG_ERR, warnings with LOG_WARNING, and debug information
with LOG_NOTICE. The facility type is daemon.
install_path\NetBackup\db\config\eventlog
56 255
“56” produces a log with the messages that have a severity of warning, error,
and critical (56 = 8 + 16 + 32). “255” produces a log with messages for all types
(255 = 1 + 2 + 4 + 8 + 16 + 32 + 64 +128).
3 Restart the NetBackup services.
16 = Error
32 = Critical
Using logs 50
Logging options with the Windows Event Viewer
8 = Archive
16 = Retrieve
32 = Security
64 = Backup Status
<Severity> <Job type> <Job ID> <Job group ID> <Server> <Client> <Process> <Text>
For example:
16 4 10797 1 cacao bush nbpem backup of client bush exited with status 71
Chapter 2
Backup process and
logging
This chapter includes the following topics:
■ Backup process
Backup process
Figure 2-1 illustrates the backup procedure and the process flow during a scheduled
backup.
Backup process and logging 52
Backup process
(3) bprd
NetBackup Jobs
(2) bpdbm nbproxy (1) nbpem (5) bpjobd
Database Database
(8) EMM
(9) bpcd (4) nbjm (6) nbrb (7) nbemm
bpcompatd Database
Active Client
(10) bpbrm (11) bpcd (12) bpbkar Outbound
Data
Connection/
Communication
Paths
Tape only
PBX
(15)txxd/
(13) bptm (14) ltid Tape or Disk
(16)txxcd vnetd
3 The nbjm service communicates with (5) bpjobd, and the job is added to the
job list in the jobs database. The job is now visible in the Activity Monitor, in a
queued state.
4 Once the job has been added to the jobs database, nbjm checks for resources
through the (6) NetBackup Resource Broker (nbrb).
5 The nbrb process secures the required resources from the (7) Enterprise Media
Manager (nbemm) and notifies nbjm that resources have been allocated.
6 After resource allocation, nbjm makes a call to the images database to create
the image files in a temporary location. The required entries in the backup
header tables are also created at this time. The job is now seen as “Active” in
the Activity Monitor.
7 Once the job is active, nbjm uses (8) bpcompatd to open a connection to the
(9) client service (bpcd) on the media server. The bpcompatd service creates
the connection through Private Branch Exchange (PBX) and the NetBackup
Legacy Network Service (vnetd).
8 The bpcd service starts the (10) NetBackup backup and restore manager
(bpbrm).
9 The bpbrm service communicates with (11) bpcd on the client server (through
PBX and vnetd) to start the (12) backup and archive manager (bpbkar). The
bpbrm service also starts the (13) tape management process (bptm).
10 In the case of a tape backup, bptm reserves the drives and issues a mount
request to the (14) logical tape interface daemon (ltid). The ltid service calls
on the (15) robotic drive daemon (txxd, where xx varies based on the type of
robot being used). The txxd daemon communicates the mount request to the
(16) robotic control daemon (txxcd), which mounts the media.
In the case of a disk backup, bptm communicates directly with the disk.
11 The bpbkar service sends the backup data through bptm to be written to the
media storage or the disk storage.
12 When the backup is completed, nbjm is notified and sends a message to
bpjobd. The job now appears as “Done” in the Activity Monitor. The nbjm
service also reports the job exit status to nbpem, which recalculates the next
due time of the job.
Each of the processes that is involved in a backup has an accompanying log file.
These logs can be consulted to diagnose any issues that you encounter with your
backups.
Backup process and logging 54
NetBackup process descriptions
Some additional logs that are not included in the backup process flow but that can
be of use in resolving backup problems include: bpbackup, reqlib, daemon, robots,
and acsssi.
A daemon that executes on all servers and clients is the NetBackup client daemon,
bpcd. On UNIX clients, inetd starts bpcd automatically so no special actions are
required. On Windows clients, bpinetd performs the same functions as inetd.
Note: All NetBackup processes on UNIX can be started manually by running the
following: /usr/openv/netbackup/bin/bp.start_all
Backup process and logging 55
NetBackup process descriptions
The NetBackup master server and the Enterprise media manager (EMM) server
must reside on the same physical host.
The master server is responsible for running jobs as configured in NetBackup
policies by using the services nbpem and nbjm.
The EMM services allocate resources for the master server. The EMM services are
the repository for all device configuration information. The EMM services include
nbemm and its subcomponents along with the nbrb service for device and resource
allocation.
Backup process and logging 56
About backup logging
Note: It is recommended that the diagnostic level for unified logging be set at the
default level of 6.
■ Barcode operations
robotic Each host with a robotic drive attached must have a robotic daemon.
These daemons provide the interface between ltid and the robot. If
different drives within a robot can attach to different hosts, the robotic
daemon communicates with a robotic-control daemon (see Figure 3-1).
robotic control Robotic-control daemons centralize the control of robots when drives
within a robot can connect to different hosts. A robotic-control daemon
receives mount and unmount requests from the robotic daemon on the
host to which the drive is attached. It then communicates these requests
to the robot.
Automated
ltid acsd acsssi Cartridge System
acsel
Optical Disk
odld Library
Tape Library
vmd avrd tl4d 4mm
Tape Library
tl8d tl8cd 8mm
Tape Library
tldd tldcd DLT
Tape Library
tlhd tlhcd Half-inch
Tape Stacker
tshd Half-inch
Media and device processes and logging 61
Media and device management process
Note: When you mount a tape on UNIX, the drive_mount_notify script is called.
This script is in the /usr/openv/volmgr/bin directory. Information on the script can
be found within the script itself. A similar script is called for the unmount process
(drive_unmount_notify, in the same directory).
When a robotic volume is added or removed through the media access port, the
media management utility communicates with the appropriate robotic daemon to
verify the volume location or barcode. The media management utility (through a
library or command-line interface) also calls the robotic daemon for robot inventory
operations.
Figure 3-2 shows an example of the media and device management process.
Media and device processes and logging 62
Shared Storage Option management process
EMM
Database Device-
bptm management
utility
Request
tape mount
Media-
ltid nbemm management
utility
Mo
un Inventory
tm
ed barcodes
ia
ID or inject/eject
Robotic
Non-robotic drives control
Tape library
Enterprise Media Manager Media TL8
(Master Server) Server
■ nbrb tells the device allocator (DA) in the EMM server to stop scanning the
selected drive.
■ nbemm tells the appropriate media server (the scan host for the selected drive)
to stop scanning the drive. The stop scan request is carried out by means of
oprd, ltid, and avrd in the media server’s shared memory.
Media and device processes and logging 63
Shared Storage Option management process
■ nbemm informs nbrb when the scanning on the selected drive has stopped.
■ nbrb informs nbjm that the selected drive (A) is available for the backup.
■ nbjm conveys the mount request and drive selection to bptm, which proceeds
with the backup. To protect the integrity of the write operation, bptm uses SCSI
reservations.
For more information about how NetBackup reserves drives, see the NetBackup
Administrator’s Guide, Volume II.
■ The mount-media operation is initiated.
■ bptm makes position checks on the drive to ensure that another application has
not rewound the drive. bptm also does the actual write to the tape.
■ When the backup is complete, nbjm tells nbrb to release resources.
■ nbrb de-allocates the drive in EMM.
■ EMM tells the scan host to resume scanning the drive. The scan request is
carried out by means of oprd, ltid, and avrd in the media server’s shared
memory.
Figure 3-3 illustrates the Shared Storage Option management process.
Media and device processes and logging 64
Barcode operations
Figure 3-3 Media and device management process flow showing SSO
components
EMM
Backup and Database
Device
archive
monitor
process
Device-
nbjm nbrb nbemm/DA management
utility
n
ca
ps
Sto
bptm
Barcode operations
Barcode reading is mainly a function of the robot hardware instead of media and
device management. When a robot has a barcode reader, it scans any barcode
that is on a tape and stores the code in its internal memory. This associates the
slot number and the barcode of the tape in that slot. NetBackup determines that
association for its own use by interrogating the robot.
If a robot supports barcodes, NetBackup automatically compares a tape’s barcode
to what is in the EMM database as an extra measure of verification before you
Media and device processes and logging 65
Barcode operations
mount the tape. A request for the media that is in a robot that can read barcodes
begins in the same manner as other requests.
See Figure 3-4 on page 66.
The ltid command includes the media ID and location information in a mount
request to the robotic daemon for the robot that has the media ID. This request
causes the robotic daemon to query the robotic-control daemon or the robot for the
barcode of the tape in the designated slot. (This is a preliminary check to see if the
correct media is in the slot.) The robot returns the barcode value it has in memory.
The robotic daemon compares this barcode with the value it received from ltid
and takes one of the following actions:
■ If the barcodes don’t match, and the mount request is not for a NetBackup
backup job, the robotic daemon informs ltid and a pending action request
(Misplaced Tape) appears in the Device Monitor. An operator must then insert
the correct tape in the slot.
■ If the barcodes don’t match and the mount request is for a NetBackup backup
job, the robotic daemon informs ltid and the mount request is canceled.
NetBackup (bptm) then requests a new volume from nbjm and from EMM.
■ If the barcodes match, the robotic daemon requests the robot to move the tape
to a drive. The robot then mounts the tape. At the start of the operation, the
application (for example, NetBackup) checks the media ID and if it also matches
what should be in this slot, the operation proceeds. For NetBackup, a wrong
media ID results in a “media manager found wrong tape in drive” error
(NetBackup status code 93).
Media and device processes and logging 66
Media and device management components
EMM
Request Media ID Database
mount
ltid nbemm
Media-
Mount media vmd management
ID utility
Robot inventory
request or inject
tl8d tl8cd
1 2 3
What is Mount
Barcode
barcode tape
NetBackup server
/usr/openv/volmgr/
/usr/openv/volmgr/bin/ /usr/openv/volmgr/debug/1
bin Commands, scripts, programs, daemons, and files that are required for media and
device management. The following subdirectories under bin are available:
driver: Contains the SCSI drivers that are used on various platforms to control robotics.
debug Legacy debug logs for the Volume Manager daemon, vmd, and all requesters of vmd,
ltid, and device configuration. The administrator must create these directories for
debug logging to occur.
help Help files that the media and device management programs use. These files are in
ASCII format.
misc Lock files and temporary files that are required by the various components of media
and device management.
Table 3-2 describes the media management and device management programs
and daemons. The components are located in the following directory:
/usr/openv/volmgr/bin
Media and device processes and logging 68
Media and device management components
install_path\volmgr\bin.
Note: On UNIX, syslog manages the system log (the facility is daemon). On
Windows, the Event Viewer manages the system log (the log type is Application).
Program or Description
daemon
acsd The Automated Cartridge System daemon interfaces with the Automated Cartridge System.
It communicates with the server that controls the ACS robotics through the acsssi process
(UNIX) or the STK Libattach Service (Windows).
Stopped By: Stopping ltid (or on UNIX, independently by finding the PID (process ID) and
then using the kill command).
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option: this option can also be used through
ltid, or by putting VERBOSE in the vm.conf file.
avrd The automatic-volume-recognition daemon controls the automatic volume assignment and
label scanning. This daemon lets NetBackup read labeled tape volumes and automatically
assigns the associated removable media to the requesting processes.
Stopped By: Stopping ltid, (or on UNIX, independently by finding the PID (process ID)
and then using the kill command).
Debug Log: All errors are logged in the system log. Debug information is included by adding
VERBOSE to the vm.conf file. On UNIX, debug information is also included by aborting
avrd and starting the daemon with the -v option.
Media and device processes and logging 69
Media and device management components
Program or Description
daemon
ltid The device daemon (UNIX) or NetBackup Device Manager service (Windows) controls the
reservation and assignment of tapes.
Debug Log: Errors are logged in the system log and the ltid debug log. Debug information
is included if the daemon is started with the -v option (available only on UNIX) or adding
VERBOSE to the vm.conf file.
tl4d The Tape Library 4MM daemon is the interface between ltid and the Tape Library 4MM
and communicates with the robotics through a SCSI interface.
Stopped By: Stopping ltid (or on UNIX, independently by finding the PID (process ID) and
then using the kill command).
Debug Log: All errors are logged in the system log. Debug information is included by adding
VERBOSE to the vm.conf file. On UNIX, debug information is also included by starting the
daemon with the -v option (either by itself or through ltid).
tl8d The Tape Library 8MM daemon provides the robotic control for a TL8 robot (Tape Library
8mm or Tape Stacker 8mm). The Tape Library 8MM daemon drives in the same TL8 robot
can be attached to different hosts than the robotic control. tl8d is the interface between the
local ltid and the robotic control. If a host has a device path for a drive in a TL8 robot, then
mount or unmount requests for that drive go first to the local ltid and then to the local tl8d (all
on the same host). tl8d then forwards the request to tl8cd on the host that is controls the
robot (it can be on another host).
Stopped By: Stopping ltid (or on UNIX, independently by finding the PID (process ID) and
then using the kill command.
Debug Log: Errors are logged in the system log and the robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option (either by itself or through ltid).
Media and device processes and logging 70
Media and device management components
Program or Description
daemon
tl8cd The Tape Library 8MM control daemon provides the robotic control for a TL8 robot and
communicates with the robotics through a SCSI interface. tl8cd receives mount and unmount
requests from tl8d on the host to which the drive is attached and then communicates these
requests to the robot.
Debug Log: Errors are logged in the system log and the robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option (either by itself or through ltid).
tldd The Tape Library DLT daemon works with tldcd to handle requests to TLD robots (Tape
Library DLT and Tape Stacker DLT). tldd provides the interface between the local ltid and
the robotic control (tldcd) in the same way as explained previously for tl8d.
Stopped By: Stopping ltid (or on UNIX, independently by finding the PID (process ID) and
then using the kill command).
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option (either by itself or through ltid).
tldcd The tape library DLT control daemon provides robotic control for a TLD robot in the same
way as explained previously for tl8cd.
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option (either by itself or through ltid).
Media and device processes and logging 71
Media and device management components
Program or Description
daemon
tlhd The Tape Library Half-inch daemon works with tlhcd to handle requests to the TLH robots
that are in an IBM Automated Tape Library (ATL). tlhd provides the interface between the
local ltid and the robotic control (tlhcd) in the same way as explained previously for tl8d.
Stopped By: Stopping ltid (or on UNIX, independently by finding the PID (process ID) and
then using the kill command).
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included by adding VERBOSE to the vm.conf file. On UNIX, debug information is also
included by starting the daemon with the -v option (either by itself or through ltid).
tlhcd The Tape Library half-inch control daemon provides robotic control for a TLH robot that is in
an IBM Automated Tape Library (ATL) in the same way as explained previously for tl8cd.
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included if the daemon is started with the -v option (either by itself or through ltid). The
-v option is available only on UNIX. Also, add the VERBOSE option to the vm.conf file.
tlmd The Tape Library Multimedia daemon is the interface between ltid and a TLM robot that
is in an ADIC Distributed AML Server (DAS). This daemon communicates with the TLM
robotics through a network API interface.
Stopped By: Stopping ltid or stopping independently by finding the PID (process ID) and
then using the kill command.
Debug Log: Errors are logged in the system log and robots debug log. Debug information
is included if the daemon is started with the -v option (either by itself or through ltid). The
-v option is available only on UNIX. Also, add the VERBOSE option to the vm.conf file.
Media and device processes and logging 72
Media and device management components
Program or Description
daemon
tshd The Tape Stacker Half-inch daemon is the interface between ltid and the half-inch-cartridge
stacker and communicates with the robotics through a SCSI interface. This robot is not
supported on Windows.
Stopped By: Quit option from within the utility on UNIX. On Windows, tpconfig is only a
command-line interface that runs to completion (no quit option).
vmd The Volume Manager daemon (NetBackup Volume Manager service on Windows) allows
the remote administration and control of Media and Device Management.
Debug Log: System log and also a debug log if the daemon or reqlib debug directories exist.
vmscd The Media Manager Status Collector Daemon keeps the EMM server database up-to-date
with the actual status of the drives that are attached to the 5.x servers.
■ Restore process
Restore process
Understanding how the restore process works is a helpful first step in deciding
which logs to gather for a particular issue. The restore process differs depending
on whether you restore an image from tape or from disk.
Figure 4-1 illustrates a restore from tape.
Restore process and logging 74
Restore process
(2) bprestore
NetBackup
(3) bpdbm (1) bprd (4) bpjobd Jobs Database
Database
Outbound
Connection/
Communication
Paths
(7) tar (11) ltid (9) nbrb
PBX
Some additional logs that are not included in the restore process flows but that can
be of use in resolving restore problems include: reqlib, daemon, robots, and
acsssi.
(2) bprestore
NetBackup
(3) bpdbm (1) bprd (6) bpjobd Jobs Database
Database
(9) bptm (7) bpbrm (4) bprd child (5) nbemm EMM Database
Active Client
(8) tar
Data PBX vnetd
3 The bprd process initiates a (4) child bprd process. The child bprd process
makes a call to the (5) Enterprise Media Manager (nbemm) to verify that the
disk storage unit is available.
4 The child bprd process communicates with (6) bpjobd to allocate a jobid.
The restore job is now visible in the Activity Monitor.
5 The bprd process starts the (7) NetBackup backup and restore manager (bpbrm)
on the media server, through Private Branch Exchange (PBX) and the NetBackup
Legacy Network Service (vnetd).
6 The bpbrm service uses PBX and vnetd to establish a connection with the (8)
Tape Archive program (tar) on the client system. It also starts the (9) tape
management process (bptm).
7 The bptm process makes a call to bpdbm (through PBX and vnetd) to get the
fragment information and then mounts the disk.
8 The bptm process reads the backup image from the disk and streams the
requested data to tar.
9 The tar process commits the data to the storage destination.
Each of the processes that is involved in a restore has an accompanying log file.
These logs can be consulted to diagnose any issues that you encounter with your
restore.
See “About restore logging” on page 80.
Query Query
Master Client
Server Server
The following are the processing steps in a restore (in the order presented):
■ When the user starts a restore, NetBackup invokes the client’s bprestore
program which sends a request to the request daemon, bprd. This request
identifies the files and client. The request daemon then uses bpcd (client daemon)
to start the backup and restore manager (bpbrm).
Note: To restore Backup Exec images, bpbrm initiates mtfrd instead of nbtar
on the clients. The server processes are the same as those used for NetBackup
restores.
■ If the disk device or tape device on which the data resides attaches to the master
server, the following occurs: bprd starts the backup and restore manager on
the master server. If the disk unit or tape unit connects to a media server, bprd
starts the backup and restore manager on the media server.
■ The backup and restore manager starts bptm and uses the client daemon (bpcd)
to establish a connection between NetBackup nbtar on the client and bptm on
the server.
■ For tape: The bptm process identifies which media is needed for the restore,
based on the image catalog. bptm then requests the allocation of the required
media from nbrb through nbjm. nbjm then asks mds (part of nbemm)for the
Restore process and logging 79
Windows client restore
resources. nbemm allocates the media and selects and allocates an appropriate
drive (for tape media).
bptm asks ltid to mount the tape in the drive.
For disk: bptm does not need to ask nbrb for an allocation, because disk
inherently supports concurrent access. bptm uses the file path in a read request
to the system disk manager.
■ bptm directs the image to the client in one of two ways. If the server restores
itself (server and client are on the same host), nbtar reads the data directly
from shared memory. If the server restores a client that resides on a different
host, it creates a child bptm process which transmits the data to nbtar on the
client.
Note: Only the part of the image that is required to satisfy the restore request
is sent to the client, not necessarily the entire backup image.
■ The NetBackup nbtar program writes the data on the client disk.
Note: PBX must be running for NetBackup to operate (PBX is not shown in the
next diagram). See the NetBackup Troubleshooting Guide for more information on
how to resolve PBX problems.
NetBackup
nbwin bprd
user interface
bpinetd bpbrm
bpcd bptm
tar32
Backup Image
Client Disk
Note: It is recommended that the diagnostic level for unified logging be set at the
default level of 6.
Restore process and logging 82
Sending restore logs to Technical Support
■ Synthetic backups
(1) NetBackup
bpbackup
(2) bpdbm (2) nbpem (1) bprd User Interface or
(script)
command line
(4) bpcd
Shared
memory
Shared (7,8)
Disk STU (7,10) nbftclnt NBDB (master)
memory nbftsrvr
Control Path
Master Media Client
Server Server Server
Data Path
The processing steps for a SAN client backup operation are the following:
SAN client backup procedure
1 The NetBackup master server or primary client initiates the backup. The
NetBackup Request Daemon (bprd) submits a backup request to the NetBackup
Policy Execution Manager (nbpem). nbpem processes the policy configurations.
All other daemons and programs are started as necessary including nbpem,
nbjm, nbrb, and nbemm.
3 The Job Manager service (nbjm) requests backup resources from the Resource
Broker (nbrb), that returns information on the use of shared memory for the
SAN client.
4 The nbjm service starts the backup by means of the client daemon bpcd, which
starts the backup and restore manager bpbrm.
5 The bpbrm service starts bptm, which does the following:
■ Requests the SAN client information from nbjm.
■ Sends a backup request to the FT server process (nbftsrvr).
■ Sends a backup request to the FT client process on the client (nbftclnt),
that does the following: Opens a Fibre Channel connection to nbftsrvr on
the media server, allocates the shared memory, and writes the shared
memory information to the backup ID file.
6 The bpbrm service uses bpcd to start bpbkar, that does the following:
■ Reads the shared memory information from the BID file (waits for the file
to exist and become valid).
■ Sends the information about files in the image to bpbrm.
■ Writes the file data to bpbkar, optionally compresses it, then writes the data
to the shared buffer.
■ Sets the buffer flag when the buffer is full or the job is done.
7 The FT client process (nbftclnt) waits for the shared memory buffer flag to
be set. It then transfers the image data to the FT Server (nbftsrvr) shared
memory buffer, and clears the buffer flag.
8 The nbftsrvr service waits for data from nbftclnt; and writes the data is
written to the shared memory buffer. When the transfer completes, nbftsrvr
sets the buffer flag.
9 bptm waits for the shared memory buffer flag to be set, writes data from the
buffer to the storage device, and clears the buffer flag.
10 At the end of the job:
■ bpbkar informs bpbrm and bptm that the job is complete.
Advanced backup and restore features 86
SAN Client Fiber Transport restore
■ nbftclnt closes the Fibre Channel connection and deletes the BID file.
NetBackup
nbjm bprd bprestore user interface
Command
bpcd
line
Backup Image
(Tape or Disk)
Backup Image
UNIX: NetBackup
Shared Shared
bptm child nbtar
Memory Memory Windows: tar32
The process flow for a SAN client restore is as follows (in the order presented).
■ When the user starts a restore, NetBackup invokes the client’s bprestore
program that sends a request to the request daemon, bprd. This request
identifies the files and client. The request daemon then uses bpcd (client daemon)
to start the backup and restore manager (bpbrm).
■ If the disk or tape where the data resides attaches to the master server, then
bprd starts the backup and restore manager on the master server. If the disk
unit or tape unit connects to a media server, bprd starts the backup and restore
manager on the media server.
■ bpbrm starts bptm and provides bptm with the backup ID and the shmfat (shared
memory) flag.
■ bptm does the following:
■ Requests the SAN client information from the Job Manager service (nbjm).
■ Sends a restore request to the FT server process (nbftsrvr).
■ Sends a restore request to the FT client process on the client (nbftclnt).
nbftclnt opens a Fibre Channel connection to nbftsrvr on the media
server, allocates the shared memory, and writes the shared memory
information to the backup ID file.
■ bpbrm starts tar by means of bpcd and provides tar with the backup ID, socket
information, and the shmfat (shared memory) flag.
■ bptm does the following:
■ The FT Server process nbftsrvr waits for the shared memory buffer flag to be
set. nbftsrvr then transfers the image data to the FT client (nbftclnt) shared
memory buffer, and clears the buffer flag.
Advanced backup and restore features 88
Hot catalog backup
■ The FT client (nbftclnt) waits for the data from nbftsrvr and writes the data
to the shared memory buffer on the client. nbftclnt then sets the buffer flag.
■ At the end of the job:
■ bptm informs tar and bpbrm that the job is complete.
■ nbftclnt closes the Fibre Channel connection and deletes the BID file.
bprd bpbackupdb
nbpem
nbjm
Back up relational database files
3 Back up NetBackup database files
/usr/openv/db/ bprd
staging
Master Server
■ A child job that backs up the NetBackup database files (all files in
/usr/openv/netbackup/db).
NetBackup creates the disaster recovery file, and emails it to the administrator
if the email option was selected in the policy.
Consult the following logs for messages on hot catalog backup:
■ bpdbm, bpbkar, bpbrm, bpcd, bpbackup, bprd
For messages pertaining only to the relational database files, see the EMM server.log
file and the bpdbm log file in the following directories:
■ UNIX: /usr/openv/netbackup/logs/bpdbm
/usr/openv/db/log/server.log
■ Windows: install_path\NetBackup\logs\bpdbm
install_path\NetBackupDB\log\server.log
Note: Before you run a hot catalog restore in a disaster recovery situation, the
identity of the master server should be recovered either by the disaster recovery
installation or the nbhostidentity -import -infile drpkg.path command.
Once the identity is recovered, the hot catalog recovery can be completed as usual.
NetBackup Command
recovery wizard line
bprd bprecover
2 3 4
See “Restore
from tape (UNIX)”
or “Restore from Restore
disk”, depending Relational
on the catalog /usr/openv/db/ Relational
Database Files
backup policy staging database files
See “Restore
from tape (UNIX)”
or “Restore from
disk”, depending
on the catalog Master Server
backup policy
A restore of the NetBackup database and relational database (NBDB) files from a
hot catalog backup consists of the following steps (in the order presented):
■ The NetBackup catalog image and configuration files are restored.
■ The NBDB files are restored. The database files are restored to
/usr/openv/db/staging (UNIX), or to install_path\NetBackupDB\staging
(Windows).
■ After the files are restored to the staging directory, NBDB is recovered.
■ The NBDB files are moved from the staging directory to a location that is
determined by the following: The bp.conf file VXDBMS_NB_DATA setting on UNIX
and by the corresponding registry key on Windows. The default location is
/usr/openv/db/data on UNIX, and install_path\NetBackupDB\data on
Windows.
If the relational database files are relocated, they are moved from the staging
directory to the /usr/openv/db/data/vxdbms.conf file (UNIX) or the
install_path\NetBackupDB\data\vxdbms.conf file (Windows). For information
Advanced backup and restore features 92
Synthetic backups
on how to relocate the NetBackup relational database files after installation, see
the NetBackup Administrator’s Guide, Volume I.
Synthetic backups
The typical NetBackup backup process accesses the client to create a backup. A
synthetic backup is a backup image created without using the client. Instead, a
synthetic backup process creates a full or a cumulative incremental image by using
previously created backup images called component images.
For example, an existing full image and subsequent differential incremental images
can be synthesized to create a new full image. The previous full image and the
incrementals are the component images. The new synthetic full image behaves
like a backup that is created through the traditional process. The new synthetic full
image is a backup of the client that is as current as the last incremental. The
synthetic image is created by copying the most current version of each file from the
most recent component image that contains the file. A synthetic backup must be
created in a policy with the True Image Restore with Move Detection option
selected. This option enables the synthetic backup to exclude the files that have
been deleted from the client file system from appearing in the synthetic backup.
Like a traditional backup, nbpem initiates a synthetic backup. It submits a request
to nbjm to start the synthetic backup process and nbjm then starts bpsynth, which
executes on the master server. It controls the creation of the synthetic backup image
and the reading of the files that are needed from the component images. If directory
bpsynth exists in the debug log directory, additional debug log messages are written
to a log file in that directory.
bpsynth makes a synthetic image in several phases:
Advanced backup and restore features 93
Synthetic backups
Table 5-1
Phase Description
nbpem
nbjm
Request to make
Synthetic backup
2 - Obtain In phase 2, bpsynth obtains write resources (storage unit, drive, and media)
resources for the new image. It also reserves all the read media containing component
images and obtains the drive for the first media to be read.
Phase Description
3 - Copy In phase 3, bpsynth starts the writer bptm (for tape and disk) on the media
data server to write the new synthetic image. It also starts a reader bptm (tape)
or bpdm (disk) process for each component image on a media server that
can access the component image. The reader process reads all extents for
the component image.
child
bptm
Data flow
child bptm
or bpdm
parent bptm Component
or bpdm image(s)
Master Media
Server Server
Note that bpsynth only starts the parent bptm (writer) and bpdm (reader)
process on the media server. The parent in turn starts a child process. The
parent and child communicate by means of buffers in shared memory.
The bpsynth process sends the extents (starting block and count) for each
component image to the corresponding child bptm or bpdm reader process.
The parent bptm or bpdm reader process reads the data from the appropriate
media into the shared buffers. The child bptm or bpdm reader process sends
the data in the shared buffers to the child bptm writer process over a socket.
The child bptm writer process writes the data into the shared buffers. The
parent bptm writer process copies the data from the shared buffers to the
media and notifies bpsynth when the synthetic image is complete.
4 - Validate In phase 4, the bpsynth process validates the image. The new image is now
the image visible to NetBackup and can be used like any other full or cumulative
incremental backup.
Synthetic backup requires that true image restore (TIR) with move detection
be selected for each component image, and that the component images are
synthetic images.
Advanced backup and restore features 95
Synthetic backups
install_path/netbackup/db/jobs/trylogs/jobid.t
If the job ID of the synthetic backup job was 110, the try file is named
110.t.
Policy attributes Use the following command to capture the policy attributes:
install_path/netbackup/bin/admincmd/bppllist
policy_name -L
List of storage Capture the list of storage units from the following command:
units
install_path/netbackup/bin/admincmd/bpstulist -L
Step 3 Change the Global In Host Properties, select a master server and set the Global logging level to
logging level. 5.
See the NetBackup Troubleshooting Guide for more information on how to use the
host properties to access configuration settings.
Step 4 Rerun the job. Rerun the job and gather the logs from the directories that you created.
The bptm logs are required only if the images are read from or written to a tape
device or disk. The bpdm logs are needed only if the images are read from disk.
If the images are read from multiple media servers, the debug logs for bptm or
bpdm must be collected from each media server.
Chapter 6
Storage logging
This chapter includes the following topics:
Image Jobs DB
File Database nbemm Catalog
nbrb (3,4) EMM DB
(3,4) (MDS)
bpdbm bpjobd
nbemm
NDMP Server
bpbrm ndmpagent
bpcd (5) Application Local Disk
(5,6) (7) (8-Local)
Disk
bpcd (5)
NDMP Server
ltid (6,7) bptm (6) Application
NDMP Host
d
NDMP Host 1
Snapshot
Create
ntrol Path
ckup Image
talog Info
Storage logging 100
NDMP backup logging
The basic processing steps for an NDMP backup operation are the following:
NDMP backup procedure
1 The NetBackup administrator runs the bpbackup command to start the backup
job. Or, a scheduled policy that is created on the NetBackup Administration
Console can initiate the job.
2 The bpbackup process connects to the master server and creates the backup
request. The Request Manager (bprd) sends the backup request to the Policy
Execution Manager (nbpem), who submits the job to the Job Manager (nbjm).
3 nbjm requests resources from the Resource Broker (nbrb) that are required
to run the job. nbrb accesses the Media and Device Selection (MDS) of the
Enterprise Media Management (nbemm) to evaluate the resources request.
MDS queries the EMM database to identify the resources to use for this job.
4 MDS provides nbrb with a list of resources for the job, and nbrb passes it on
to nbjm.
5 nbjm initiates communication with the media server that is associated with this
backup job. It goes through the client service (bpcd) to start the Backup and
Restore Manager (bpbrm) on the media server.
6 bpbrm starts the Tape Manager (bptm) on the media server. Eventually, the
parent bptm process makes a request to ltid to mount the tape to be used
for the backup job.
7 On the NetBackup for NDMP server, one of the following occurs: sends the
necessary NDMP SCSI robotic commands to mount the requested tape on the
storage device.
■ The NDMP agent service (ndmpagent) connects to the filer that issues the
NDMP commands to mount the tape that is directly attached.
■ ltid on the media server issues the necessary NDMP SCSI robotic
commands to mount the requested tape on the storage device.
that houses the data to be backed up to the NDMP server that writes the
backup to its tape storage.
■ Remote backup (not shown in the process flow diagram). The device that
is used to write the backup is associated with a NetBackup storage unit.
bptm on the NetBackup media server mounts a tape on a tape drive.
NetBackup sends the NDMP commands to the NDMP server to initiate the
backup to the non-NDMP media manager storage unit. The data travels
over the network from the NDMP host to the NetBackup media server,
which writes the data to the selected storage unit.
9 Throughout the backup operation and at its completion, the NDMP server sends
status about the backup operation to the NetBackup for NDMP server. Several
NetBackup processes send information about the job to bpjobd, that uses this
information to update the job status that you can view in the NetBackup Activity
Monitor.
Status, catalog, and other job information movement is shown in dashed lines
in the process flow diagram.
Storage logging 102
NDMP restore logging
Backup, Archive,
nbjm (2,3) nbpem (1) bprd (1)
and Restore (1)
bpbackup (1)
local restore
bpbrm ndmpagent
bpcd (3)
(3,4,6) (4,5,6)
NDMP host 1
bpjobd (6)
Remote restore 3-way restore
over the network over the network
NetBackup
Master
for NDMP NDMP Host Status Info
Server
Server
The basic processing steps for an NDMP restore operation are as follows:
Storage logging 103
NDMP restore logging
the restore data from tape and sends it over the network to the NDMP host
where the data is written to disk storage.
6 The NDMP server sends status information about the restore operation to the
NetBackup for NDMP server. Various NetBackup processes (nbjm, bpbrm,
bptm, and others) send job status information to the master server. The Jobs
Database Manager (bpjobd) process on the master server updates the restore
job status in the jobs database. You can view this status in the Activity Monitor.
Chapter 7
NetBackup Deduplication
logging
This chapter includes the following topics:
■ Logging keywords
Windows
& Java GUI
& CLIs
nbsl
nbsl
tpconfig/vmd
DSM api to manipulate Storage Servers
spad
EMM DB
spoold
In this scenario, the client backs up data directly to the media server and the media
server deduplicates the data before it stores it locally. Ensure that this is on the
correct media server which is not always the same as the MSDP storage server
(due to load balancing).
For deduplication-specific logging, enable the following on the media server:
1. Verbose 5 bptm logging:
■ Create a log directory named bptm in /usr/openv/netbackup/logs
(Windows: install_path\NetBackup\logs)
■ Set the bptm log verbosity to 5 in the NetBackup Administration Console.
To do this, click on Host Properties > Logging for the media server. If you
use UNIX/Linux, set the bptm log verbosity to 5 in the
/usr/openv/netbackup/bp.conf file by appending the following line:
NetBackup Deduplication logging 107
Deduplication backup process to the Media Server Deduplication Pool (MSDP)
BPTM_VERBOSE = 5
LOGLEVEL = 10
Note: You can also modify DEBUGLOG in the pd.conf file to specify a path
to which to log; however, we recommend leaving the DEBUGLOG entry
commented out. The logging information (PDVFS debug logging) then logs
to the bptm and bpdm logs.
■ Ensure that you are on the correct media server and restart the MSDP
storage server services.
5. Extract the bptm PID found in step 3 from the bptm log on the media server.
This step only gathers the single-line entries; review the raw logs to see the
multi-line log entries. In the following examples, 3144 is the bptm PID:
NetBackup Deduplication logging 108
Client deduplication logging
6. Gather the spoold session logs that cover the dates from when the backup
started and when it failed from the following logs:
Windows:
dedup_path\log\spoold\mediasvr_IP_or_hostname\bptm\Receive\MMDDYY.log
dedup_path\log\spoold\mediasvr_IP_or_hostname\bptm\Store\MMDDYY.log
UNIX/Linux:
dedup_path/log/spoold/mediasvr_IP_or_hostname/bptm/Receive/MMDDYY.log
dedup_path/log/spoold/mediasvr_IP_or_hostname/bptm/Store/MMDDYY.log
install_path\NetBackup\logs\nbostpxy
UNIX/Linux:
/usr/openv/netbackup/logs/nbostpxy
5. tpcommand (...\volmgr\debug\tpcommand)
6. storage_directory\log\msdp-config.log
■ storage_directory\log\pdde-config.log
■ storage_directory\log\pdde-config.log
printcmds=true
printCmdLines=true
debugMask=0x0C000000
debugOn=true
■ tpcommand (...\volmgr\debug\tpcommand)
■ storage_directory\log\msdp-config.log
For backups:
■ Enable verbose 5 bptm on the media servers to read/write backups
■ Uncomment LOGLEVEL = 10 in the media server pd.conf file
For duplications or replications:
■ Enable verbose 5 bpdm on the media server(s) to read/write duplications
■ Uncomment LOGLEVEL = 10 in the media server pd.conf file
■ Enable trace level spad and spoold logging so that the failing duplication or
replication job can be traced across bpdm/pdvfs > source spad/spoold session
log > source replication.log > target spad/spoold session logs
Logging keywords
Support uses the following keywords when it reviews the logs.
Keyword Description
get_agent_cfg_file_path_for_mount Uses the PureDisk agent configuration file (note the .cfg
file name); determines short name or FQDN.
Recommended routing table CR routing table for the CR's to route fingerprint/so's; more
useful when PDDO targets PureDisk.
Windows
& Java GUI
& CLIs
nbsl
nbsl
tpconfig/vmd
DSM API to manipulate storage servers
In this scenario, the client backs up the data directly to the media server and the
media server accesses the vendor plug-in to transfer the data to the storage server.
For logging that is specific to OST, enable the following on the media server or
plug-in host:
1. In the registry or bp.conf file, set VERBOSE = 5.
2. Ensure that the following directories exist under /usr/openv/netbackup/logs
(for Windows, use install_path\NetBackup\logs):
■ bptm
■ bpbrm
■ bpstsinfo
9. Extract the bptm PID found in step 8 from the bptm log on the media server.
This step gathers only the single-line entries; review the raw logs to see the
multi-line log entries. In the following examples, 3144 is the bptm PID:
■ Windows command line:
10. Gather the vendor specific plug-in logs that cover the dates from when the
backup started and when it failed.
OpenStorage Technology (OST) logging 116
OpenStorage Technology (OST) configuration and management
After the initial configuration of the diskpools, you must run the nbdevconfig
-updatedp command as follows to recognize any new flag that the vendor added:
To manually add the supported flags, you can use the following commands:
■ nbdevconfig -changests -storage_server storage server name -stype
OST_TYPE -setattribute OptimizedImage
OpenStorage Technology (OST) logging 118
OpenStorage Technology (OST) configuration and management
You should also review the following flag for the storage server:
■ OptimizedImage - supports accelerator
To list the OpenStorage credentials for all of the media servers, use the following
commands:
■ UNIX/Linux: /usr/openv/volmgr/bin/tpconfig -dsh -all_hosts
■ Windows: install dir\volmgr\bin\tpconfig -dsh -all_hosts
Chapter 9
Storage lifecycle policy
(SLP) and Auto Image
Replication (A.I.R.) logging
This chapter includes the following topics:
■ About storage lifecycle policies (SLPs) and Auto Image Replication (A.I.R.)
Understanding the storage lifecycle policy (SLP) operations (for example, backup,
duplication, replication, import, and snapshot) can help determine which logs can
be used to troubleshoot an issue. This topic primarily focuses on the Automatic
Image Replication (A.I.R.) and duplication process flows. The process flow for other
operations, like backups and snapshots, are covered in other topics of this guide.
See the NetBackup Administrator’s Guide, Volume I for more information about
SLPs and A.I.R.
Master Server
IsWindowOpen nbstserv
Lock/Unlock copy
bpduplicate bpdbm
Media Server
Create
fragment
bpdm bptm
Read/Write
offset
Storage lifecycle policy (SLP) and Auto Image Replication (A.I.R.) logging 121
Automatic Image Replication (A.I.R.) process flow logging
111 111
nbemm nbemm 2
7 8
1
bpdbm nbdb nbdb bpdbm
8 8
5
1
6
nbreplicate 178 178 219
Image dsm dsm rem Image
catalog admin log catalog
4
STS (Plug-in)
7
Exagrid Exagrid
Network
Network
Import bpimport
Data Domain event Data Domain bpdm
6 admin log
ADV Disk ADV Disk
PureDisk Network PureDisk 1
6 6
6 1
Replicated
data plug-in
MSDP/PDDO log MSDP/PDDO
Event DB Event DB
Storage lifecycle policy (SLP) and Auto Image Replication (A.I.R.) logging 123
Import process flow
Note: For A.I.R. replications, only MSDP or OST disk-based storage units are used.
The tape storage units and the advanced disk storage units cannot be used with
A.I.R. The basic disk storage units are not supported with SLP.
4. nbjm starts nbreplicate (nbreplicate appears in the admin log) and passes
nbreplicate to bpdm.
6. The replication checks are run and the replication starts. bpdm lets the source
storage server know when to initiate the replication. The source and target
storage servers then communicate to perform the actual replication of data.
7. bpdm reads the image information and sends it to bpdbm on the master server.
importmgr (master server, import manager logs within the 226 nbstserv log):
nbrmms (logs on the media server responsible for monitoring the disk storage):
stsem (storage server event manager, stsem logs within the 222 nbrmms log):
On the media servers that perform the duplication, view the appropriate bpdm and
bptm legacy logs. On the media server that initiates the A.I.R. replication operation
and on the media server that performs the subsequent import, you can view the
bpdm legacy log for additional details.
bpdm (verbose 5)
bptm (verbose 5)
You can increase the plugin logging to get additional details within bptm/bpdm or
the third-party vendors OST plugin log file regarding the duplication, replication,
and import operations.
On the master server, the following legacy logs are also helpful to review:
Storage lifecycle policy (SLP) and Auto Image Replication (A.I.R.) logging 125
SLP configuration and management
■ admin - (the admin log logs the bpduplicate or nbreplicate command for the
job)
■ bpdbm - (the NetBackup Database Manager program that contains backup policy
information, such as files, media, and client information)
nbstl –L –all_versions
To list the images that are under SLP control (that is, they are waiting for the
completion of their secondary operations), use the following command:
nbstlutil report
To display the SLP parameters using the CLI, the bpgetconfig command can be
run on the master server:
■ UNIX: bpgetconfig | grep SLP
■ Windows: bpgetconfig | findstr SLP
To list images that have been replicated using A.I.R. (run on the source master
server), use the following command:
nbstlutil repllist
To list images that are pending an A.I.R. import into the target environment (run on
the target master server), use the following command:
nbstlutil pendimplist
Chapter 10
NetBackup secure
communication logging
This chapter includes the following topics:
■ Tomcat logging
■ Command-line logging
■ Java logging
■ vssat logging
■ PBX logging
and the starting processes that are required to initiate a backup or restore. Currently,
these processes do not include the bpbkar or tar data transfer. The hosts must
have a Certificate Authority (CA) certificate and a host ID-based certificate for
successful communication. NetBackup uses the Transport Layer Security (TLS)
protocol for host communication where each host needs to present its security
certificate and validate the peer host's certificate against the Certificate Authority
(CA) certificate.
The master server acts as the CA. The master server depends on the correct
installation and configuration of services, such as pbx, nbatd and nbwmc, to deploy
the certificates.
In NetBackup 8.1, certificates are deployed to all the media servers and the clients
when they are upgraded. If certificate deployment fails, backups and restores cannot
occur. Deployment fails if the following occurs:
■ The pbx, nbatd, or nbwmc processes are not running on the master server.
■ A host cannot retrieve both the CA certificate and the host ID-based certificate
from the master server during the installation or upgrade.
When you diagnose issues with secure communication and certificates, the services
or processes that run on the master server are typically involved. After verifying
that the services are running and are at the expected NetBackup version, the log
files can help determine the issue.
For more details about NetBackup secure communications, see the Read This First
for Secure Communications document at the following URL:
https://www.veritas.com/docs/DOC5332
Note: If you have NetBackup 8.0 hosts in your environment, you can enable insecure
communication with the Enable insecure communication with NetBackup 8.0
and earlier hosts option.
Tomcat logging
The Tomcat log files are as follows (on the master server only):
UNIX: /usr/openv/wmc/webserver/logs
Windows: install path\netbackup\wmc\webserver\logs
You cannot adjust the verbosity for Tomcat log files.
The Tomcat directories contain log files such as catalina.log, nbwmc.log, and
other logs that are critical to troubleshoot Tomcat issues. This directory can also
contain Tomcat Java heap dumps that end with .hprof or Java dumps that have
NetBackup secure communication logging 128
NetBackup web services logging
file names that start with hs_err. If these files are seen in conjunction with issues
with the startup or crashes of Tomcat or nbwmc, the files from the affected time
frame should also be collected.
The logging for processes with originator IDs (OIDs) can be increased and decreased
using the vxlogcfg command located in NetBackup\bin. This command can be
used to add and remove logging for each of the previous processes. See the
following examples that use OID 439:
To add logging, use the following command with the -a (add) option:
NetBackup secure communication logging 129
Command-line logging
To remove logging, use the following command with the -r (remove) option:
Note: In the previous examples, the -a option was added to both commands
because we do not want to remove the default logging, but only change the debug
level to the out-of-the-box default level.
Caution: Always wait at least 1 full minute after changing the log file logging levels
as it may take a minute for the changes to be implemented.
Do not leave a high level of logging in place for a long period of time as it can cause
the file systems to fill up with logs.
If the OIDs are set to 0 by default, they are not affected when the default logging
levels are changed. These OIDs are as follows:
■ 156 – NetBackup ACE/TAO; this logs to any process that needs to utilize an
ACE/TAO call
■ 486 – NetBackup proxy helper; this logs to the unified nbpxyhelper log file. See
“NetBackup proxy helper logging” on page 132.
Command-line logging
The command-line logs are as follows (on any master, media, or client server):
UNIX: /usr/openv/netbackup/logs/nbcert
Windows: install path\netbackup\logs\nbcert
The nbcert log files log any nbcertcmd commands that run either manually or
automatically from the application, such as during the automatic certificate renewal.
NetBackup secure communication logging 130
NetBackup cURL logging
When issues occur that can be reproduced using nbcertcmd, the bp.conf file or
registry VERBOSE setting should be increased to 5 to troubleshoot the issue. To
increase the logging level, use the following command:
Note: NetBackup cURL logging is either on or off and it can be enabled on all of
the NetBackup clients and servers that experience issues related to secure
communication.
Java logging
Java logging can occur on any master, media, or client server on which Java is
executed. Many issues with nbwmc and secure communication are revealed when
you cannot log in to the Java console. If this occurs, it is helpful to collect the log
files for the appropriate location on which you are starting the console, such as a
PC or directly on the master server. See “Configuring and gathering logs when
troubleshooting NetBackup Administration Console issues” on page 169.
vxlogcfg -a -p NB -o 18 -s DebugLevel=6
vxlogcfg -r -p NB -o 18 -s DebugLevel=6
vssat logging
The vssat log files are located wherever they are specified. To enable vssat logging
on UNIX, use the following command:
install_path\Veritas\NetBackup\sec\at\bin\vssat setloglevel -l 4
-f C:\Program Files\Veritas\NetBackup\logs\nbatd\vssat.log
/usr/openv/netbackup/sec/at/bin/vssat setloglevel -l 0
install_path\Veritas\NetBackup\sec\at\bin\vssat setloglevel -l 0
Use -F, --enable_fips option to run the vssat command in the FIPS mode. By
default, the FIPS mode is disabled.
To disable vssat logging in FIPS mode on UNIX, use the following command:
NetBackup secure communication logging 132
NetBackup proxy helper logging
/usr/openv/netbackup/sec/at/bin/vssat setloglevel -l 0 -F
To disable vssat logging in FIPS mode on Windows, use the following command:
install_path\Veritas\NetBackup\sec\at\bin\vssat setloglevel -l 0 -F
Originator ID 486
The NetBackup proxy helper log files are useful when there are issues with
communication due to SSL/TSL errors or other secure communication issues. You
can start the processes by using the vnetd –standalone command. If there are
startup and shutdown issues, examine the vnetd log file.
The following are examples of the expected minimum number of vnetd processes:
/usr/openv/netbackup/bin/vnetd –standalone
The inbound and outbound proxy processes send logs to the nbpxyhelper log files.
The communication between them can be followed through the job details; it locates
the :INBOUND or :OUTBOUND connection ID and searches for them in the nbpxyhelper
log files. The :INBOUND and :OUTBOUND connections are only displayed if there is
an error. See the following example:
Aug 5, 2018 5:13:14 PM - Info nbjm (pid=3442) starting backup job (jobid=268) for
client nbclient1, policy ANY_nbclient1, schedule Full-EXPIRE_IMMEDIATELY
Aug 5, 2018 5:13:14 PM - Info nbjm (pid=3442) requesting STANDARD_RESOURCE resources from RB
for backup job (jobid=268, request id:{5DD92BD0-98F4-11E8-AEE4-55B66A58DDB2})
NetBackup secure communication logging 133
NetBackup proxy tunnel logging
By default, OID 486 is set to DebugLevel=0 due to the potential to create many log
files. Do not leave the logging enabled for long periods of time at DebugLevel=6.
The logging level can be changed by using the vxlogcfg command. See the
following examples:
To add logging, use the following command:
Note: In this case, the logging level is being explicitly set to 0 after the
troubleshooting is finished.
Originator ID 490
In NetBackup 8.1, the media servers can be used as a proxy tunnel for clients that
cannot connect directly with the master server.
If there are issues between the clients and media servers that act as a proxy, the
nbpxytnl logging should be increased. The logging level can be changed using
the vxlogcfg command. See the following examples:
To add logging, use the following command:
PBX logging
The Private Branch Exchange (PBX) logs are located at the following location on
any master, media or client server:
UNIX: /opt/VRTSpbx/log
Windows: C:\Program Files (x86)\VERITAS\VxPBX\log
The PBX log files can be critical when you troubleshoot secure communication
issues. In these cases, you may have to increase the size and the number of log
files as the defaults are to retain 5 log files at 1MG each. To increase the size of
the log files to 50000 KB and number of log files to 20, use the vxlogcfg command,
as follows:
Windows (in
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Veritas\VxICS\logcfg\103):
cat icsul.conf
###############################################
# Caution! Do not update/modify file by hand.
# Use vxlogcfg tool to update/modify this file
###############################################
103.DebugLevel=6
103.AppMsgLogging=ON
103.LogToOslog=false
103.LogDirectory=/var/log/VRTSpbx/
103.L10nResourceDir=/opt/VRTSpbx/resources
103.L10nLib=/optVRTSpbx/lib/libvxexticu.so.3
103.L10nResource=VxPBX
103.MaxLogFileSizeKB=51200
103.RolloverMode=FileSize
103.NumberOfLogFiles=10
103.LogRecycle=true
Certificate deployment during From the server on which the certificates cannot be deployed:
installation
■ The nbcert log
■ Installation logs
■ Gather an nbsu as it automatically collects the
installation logs
■ The nbpxyhelper log files at debug level 4 or greater
Backup failures due to failure From the problem client or media server:
to establish a secure
■ The nbcert log
connection
■ The nbpxyhelper log files at debug level 4 or greater
Web server tunnel (media) or From the media server acting as the tunnel:
web server router (client)
■ The nbpxytnl log files at debug level 6
■ The nbpxyhelper log files at debug level 4 or greater
■ VMware backup
The basic processing steps for snapshot creation and backup are the following (this
includes Windows open file backups that employ multiple data streams):
Snapshot technologies 140
Snapshot Client backup
5 bpfis contacts bprd to request transfer of bpfis state files from client to server.
This operation is enabled by default.
6 bprd requests bpcd on the client to send a list of bpfis state files.
7 bprd copies each state file from the client to the master.
8 bpfis sends snapshot information and completion status to bpbrm and exits.
bpbrm, in turn, reports the snapshot information and status to nbjm and exits.
nbjm relays the information and status to nbpem.
9 nbpem submits to nbjm a child job for the backup with a file list derived from
the snapshot information. nbjm starts bpbrm to back up the snapshot.
10 bpbrm starts bpbkar on the client. bpbkar sends the file catalog information to
bpbrm, which relays it to the NetBackup file database (bpdbm) on the master
server.
11 bpbrm starts the process bptm (parent) on the media server.
12 One of the following occurs: The next step depends on whether the media
server backs up itself (bptm and bpbkar are on the same host) or the media
server backs up a client that resides on a different host.
■ If the media server backs up itself, bpbkar stores the snapshot-based image
block-by-block in shared memory on the media server.
■ If the media server backs up a client that resides on a different host, the
bptm process on the server creates a child process of itself. The child
receives the snapshot-based image from the client by means of socket
communications and then stores the image block-by-block in shared
memory.
13 The original bptm process takes the backup image from shared memory and
sends it to the storage device (disk or tape).
Snapshot technologies 141
VMware backup
14 bptm sends the backup completion status to bpbrm, which passes it to nbjm.
15 When nbpem receives the backup completion status from nbjm, nbpem tells
nbjm to delete the snapshot. nbjm starts a new instance of bpbrm on the media
server, and bpbrm starts a new instance of bpfis on the client. bpfis deletes
the snapshot on the client, unless the snapshot is of the Instant Recovery type,
in which case it is not automatically deleted. bpfis and bpbrm report their status
and exit.
VMware backup
The following shows a VMware backup process.
The basic processing steps for a VMware backup operation are the following:
Snapshot technologies 142
VMware backup
10 The backup and archive manager (bpbkar) loads the Veritas Mapping Services
(VxMS) which loads the VMware Disk Development Kit (VDDK) APIs. The APIs
are used for reading from the vSphere datastore. VxMS maps the stream during
run-time and identifies the contents of the vmdk file. bpbkar uses VxMS to
send the file catalog information to bpbrm, which relays it to the database
manager bpdbm on the master server.
11 bpbrm also starts the process bptm (parent) on the media server.
The following shows the operation of the Veritas V-Ray within VxMS:
■ Veritas V-Ray within VxMS generates the catalog of all the files inside the
VMDK from both Windows and Linux VMs. The operation occurs while
backup data is being streamed. bpbrm on the media server sends this
catalog information to the master server.
■ The file system inode level also identifies unused and deleted blocks. For
example, if the application on VM allocates 1 TB of space for a file, of which
only 100 GB is currently used, the backup stream includes only that 100
GB. Similarly, if you delete a 1 TB file that was fully allocated in the past,
VxMS skips the deleted blocks (unless the blocks are now allocated for a
new file) from the backup stream. This optimization not only speeds up the
backup stream, but reduces needed storage even when deduplication is
not enabled.
■ If the source side deduplication feature is enabled, the VMware backup
host does the deduplication. The NetBackup deduplication plug-in using
the mapping information that VxMS generates and sees the actual files in
the file system within the VMDK. This V-Ray vision is established by the
NetBackup deduplication plug-in that loads a dedicated stream handler that
understands the VxMS mapping info.
■ Because these operations occur on the VMware backup host, the ESX
resources and the VM resources are not used. This setup is true off-host
backup with no burden on the production vSphere. Even the source side
deduplication occurs in an off-host system.
12 If the media server is the VMware Backup Host, bpbkar stores the
snapshot-based image block-by-block in shared memory on the media server.
If the media server is backing up a separate VMware Backup Host that is not
the media server, the bptm process on the server creates a child process of
itself. The child uses socket communications to receive the snapshot-based
image from the VMware Backup Host and stores the image block-by-block in
shared memory.
13 The original tape manager (bptm) process takes the backup image from shared
memory and sends it to the storage device (disk or tape).
Snapshot technologies 144
Snapshot backup and Windows open file backups
14 bptm sends backup completion status to bpbrm, which passes it to nbjm and
nbpem.
15 nbpem tells nbjm to delete the snapshot. nbjm starts a new instance of bpbrm
on the media server, and bpbrm starts a new instance of bpfis on the VMware
Backup Host. bpfis deletes the snapshot on the vSphere environment. bpfis
and bpbrm report their status and exit.
Figure 11-1 Snapshot backup and Windows open file backup using multiple
data streams
NetBackup user
Backup Policy
Configuration interface or
Management command line
Database
bpbackup or
File Database bpdbm nbproxy nbpem bprd
bparchive
nbproxy nbjm
EMM Database
bpbrm bpcd
Snapshot
Mount
Create
bpcd
bptm bptm
(parent) (child)
Mount
Tape
Request Control Path
Notes:
* For details on these components, see the Media and Device Management Functional Description
later in this chapter.
** If the media server is backing up itself (server and client on same host), there is no bptm child:
bpbkar sends the data directly to shared memory.
Snapshot technologies 146
Snapshot backup and Windows open file backups
A separate parent job creates all snapshots, then a child job backs up the snapshot.
The following sequence of operations is for snapshot creation and backup, including
the Windows open file backups that employ multiple data streams:
■ The NetBackup master server or primary client initiates the backup. This action
causes the NetBackup Request Daemon bprd to submit a backup request to
the NetBackup Policy Execution Manager nbpem. nbpem processes the policy
configurations.
■ nbpem (through nbjm) starts a parent job to create the snapshot. This job is
separate from the job that backs up the snapshot.
■ nbjm starts an instance of bpbrm through bpcd on the media server, and bpbrm
starts bpfis through bpcd on the client.
■ bpfis creates a snapshot of the client’s data by means of a snapshot method.
■ The next step depends on the following: Whether the media server backs up
itself (bptm and bpbkar on the same host), or the media server backs up a client
on a different host. If the media server backs up itself, bpbkar stores the
snapshot-based image block by block in shared memory on the media server.
If the media server backs up a client that resides on a different host, bptm on
the server creates a child process of itself. The child receives the snapshot-based
image from the client by means of socket communications and then stores the
image block-by-block in shared memory.
■ The original bptm process then takes the backup image from shared memory
and sends it to the storage device (disk or tape).
Information is available on how the tape request is issued.
See "Media and device management process" in the NetBackup Troubleshooting
Guide.
■ bptm sends backup completion status to bpbrm, which passes it to nbjm.
Snapshot technologies 147
Snapshot backup and Windows open file backups
■ When nbpem receives backup completion status from nbjm, nbpem tells nbjm to
delete the snapshot. nbjm starts a new instance of bpbrm on the media server,
and bpbrm starts a new instance of bpfis on the client. bpfis deletes the
snapshot on the client, unless the snapshot is of the Instant Recovery type, in
which case it is not automatically deleted. bpfis and bpbrm report their status
and exit.
For more information, see the NetBackup Snapshot Client Administrator’s Guide.
Note that Windows open file backups do not require Snapshot Client.
Chapter 12
Locating logs
This chapter includes the following topics:
■ acsssi logging
■ bpbackup logging
■ bpbkar logging
■ bpbrm logging
■ bpcd logging
■ bpcompatd logging
■ bpdbm logging
■ bpjobd logging
■ bprd logging
■ bprestore logging
■ bptestnetconn logging
■ bptm logging
■ daemon logging
■ ltid logging
■ nbemm logging
■ nbjm logging
■ nbpem logging
Locating logs 149
Overview of NetBackup log locations and processes
■ nbproxy logging
■ nbrb logging
■ PBX logging
■ reqlib logging
■ Robots logging
■ tar logging
■ vnetd logging
NetBackup
Error
Database
Catalog Client
Manager Progress
Debug
Files
Logs
Media
NetBackup Catalog
Administrative
Interface
Note: The log-entry format in the NetBackup logs is subject to change without
notice.
acsssi logging
On UNIX systems, the NetBackup ACS storage server interface (acsssi)
communicates with the ACS library software host.
Locating logs 151
bpbackup logging
bpbackup logging
The bpbackup command-line executable is used to initiate user backups.
/usr/openv/netbackup/logs/bpbackup
bpbkar logging
The backup and archive manager (bpbkar) is used to read client data, which is
sent to the media server to write to the storage media. It also collects metadata
about the files that have been backed up to create the files file.
/usr/openv/netbackup/logs/bpbkar
bpbrm logging
The NetBackup backup and restore manager (bpbrm) manages the client and bptm
process. It also uses the error status from the client and from bptm to determine
the final status of backup and restore operations.
/usr/openv/netbackup/logs/bpbrm
bpcd logging
The NetBackup client service (bpcd) authenticates remote hosts and launches
processes on local hosts.
/usr/openv/netbackup/logs/bpcd
bpcompatd logging
The NetBackup compatibility service (bpcompatd) creates connections between
some multi-threaded processes and NetBackup legacy processes.
/usr/openv/netbackup/logs/bpcompatd
bpdbm logging
The NetBackup Database Manager (bpdbm) manages the configuration, error, and
file databases.
/usr/openv/netbackup/logs/bpdbm
bpjobd logging
The bpjobd service manages the jobs database and relays job statuses to the
Activity Monitor.
Locating logs 153
bprd logging
/usr/openv/netbackup/logs/bpjobd
bprd logging
The NetBackup Request Daemon (bprd) responds to client and administrative
requests for backups, restores, and archives.
/usr/openv/netbackup/logs/bprd
bprestore logging
The bprestore command-line executable is used to initiate restores. It
communicates with bprd on the master server.
/usr/openv/netbackup/logs/bprestore
bptestnetconn logging
The bptestnetconn command performs several tasks that help you analyze DNS
and connectivity problems with any specified list of hosts, including the server list
in the NetBackup configuration.
To help troubleshoot connectivity problems between the services that use CORBA
communications, bptestnetconn can perform and report on CORBA connections
to named services. The command can also perform and report the responsiveness
of the NetBackup Web Service. The command shows the connection direction,
Locating logs 154
bptm logging
/usr/openv/logs/nbutils
bptm logging
The NetBackup tape management process (bptm) manages the transfer of backup
images between the client and the storage device (tape or disk).
/usr/openv/netbackup/logs/bptm
daemon logging
The daemon log includes debug information for the Volume Manager service (vmd)
and its associated processes.
/usr/openv/volmgr/debug/daemon
ltid logging
The logical tape interface daemon (ltid), also called the NetBackup Device
Manager, controls the reservation and assignment of tapes.
Locating logs 155
nbemm logging
/usr/openv/volmgr/debug/ltid
nbemm logging
On the server that is defined as the master server, the NetBackup Enterprise Media
Manager (nbemm) manages devices, media, and storage unit configuration. It supplies
nbrb with a cache list of available resources, and manages the internal state of
storage, (UP/DOWN) based on heartbeat information and disk polling.
Create the following directory before you start nbemm:
Windows: install_path\Volmgr\debug\vmscd\
UNIX: /usr/openv/volmgr/debug/vmscd
/usr/openv/logs/nbemm
nbjm logging
The NetBackup Job Manager (nbjm) accepts job requests from nbpem and from
media commands, and it acquires the necessary resources for the jobs. It interacts
with bpjobd to provide updates to the activity monitor states, starts the bpbrm media
manager service as needed, and updates the internal job states.
/usr/openv/logs/nbjm
nbpem logging
The NetBackup Policy Execution Manager (nbpem) creates policy and client tasks
and determines when jobs are run.
/usr/openv/logs/nbpem
nbproxy logging
The proxy service nbproxy enables nbpem and nbjm to query master server catalogs.
/usr/openv/netbackup/logs/nbproxy
nbrb logging
On the master server, the NetBackup Resource Broker (nbrb) locates logical and
physical resources from a cached list of resources to satisfy storage units, media,
and client reservations for jobs. It initiates drive queries every 10 minutes to check
the state of the drives.
/usr/openv/logs/nbrb
Where session_x is the session number. This directory contains vault log files,
temporary working files, and report files.
See the NetBackup Administrator’s Guide, Volume II for instructions about how to
use this entry.
install_path\NetBackup\wmc\webserver\logs
/usr/openv/wmc/webserver/logs
install_path\NetBackup\logs\nbwebservice
/usr/openv/logs/nbwebservice
See the NetBackup Troubleshooting Guide for more information on how to access
the web services logs.
C:\ProgramData\Veritas\NetBackup\InstallLogs\
WMC_configureCerts_yyyymmdd_timestamp.txt
/usr/openv/logs/nbatd
/usr/openv/netbackup/logs/nbcert
/usr/openv/wmc/webserver/logs/configureCerts.log
NetBackup creates the following logs when it renews the web server certificate.
C:\ProgramData\Veritas\NetBackup\InstallLogs\
WMC_configureCerts_yyyymmdd_timestamp.txt
/usr/openv/logs/nbatd
/usr/openv/logs/nbwebservice
/usr/openv/wmc/webserver/logs/configureCerts.log
How to access The nbwebservice (OID 466 and 484) and nbatd (OID
18) logs use unified logging. The configureCerts.log
uses a simple logging style and not VxUL.
See the NetBackup Troubleshooting Guide for more information on how to access
the web services logs.
PBX logging
Private Branch Exchange (PBX) is the communication mechanism used by most
NetBackup processes.
Locating logs 159
reqlib logging
/opt/VRTSpbx/log
To view logs for PBX, you must use the PBX product ID, which
is 50936. You also must have root or administrator privileges.
See the NetBackup Troubleshooting Guide for more information on how to access
PBX logs.
reqlib logging
The reqlib log includes debug information on the processes that request media
management services from EMM or the Volume Manager service (vmd).
/usr/openv/volmgr/debug/reqlib
Robots logging
The robots log includes debug information on all robotic daemons, including the
txxd and txxcd daemons.
/usr/openv/volmgr/debug/robots
tar logging
The Tape Archive program (tar) writes restore data to the client disk. On Windows
clients, the binary name is tar32.exe and on UNIX clients the binary name is nbtar.
/usr/openv/netbackup/logs/tar
Log location The txxd and txxcd processes do not have their own log
files. Instead, errors are logged in the robots debug log and
the system log. The system log is managed by syslog on
UNIX and by the Event Viewer on Windows.
See “UNIX logging with syslogd” on page 48.
vnetd logging
The NetBackup Legacy Network Service (vnetd) is a communication mechanism
used to create firewall-friendly socket connections.
Locating logs 161
vnetd logging
/usr/openv/logs/vnetd or
/usr/openv/netbackup/logs/vnetd if the vnetd
directory exists there. If the vnetd directory exists in both
locations, logging occurs only in
/usr/openv/netbackup/logs/vnetd.
■ Undo logging
1 2
bpjava-msvc nbatd
3A
2
Java login 4 bpjava-susvc 3B
Hashed security
tokens
bpjava-usvc
The following steps describe the NetBackup Administration Console login process:
1. The user initiates a login request to the NetBackup Administration Console.
The credentials are sent to bpjava-msvc over the Secure Sockets Layer (SSL)
using the Server Security Certificate.
2. The bpjava-msvc process authenticates the token through nbatd, which reads
the hashed security tokens on the server.
3. The following steps describe the process with the session certificate:
■ The bpjava-msvc process sends a response to the console login with a
session token and a fingerprint of the session certificate.
■ The bpjava-msvc process initiates the appropriate bpjava-*usvc process
and the session certificate and token are passed to one of the following
processes:
■ bpjava-susvc for the NetBackup Administration Console
4. Various calls are made between the NetBackup Administration Console and
nbsl, bpjava-*usvc, and nbvault (if configured) to populate the interface with
the appropriate contents.
and a user service. The logon request is sent to the authentication service. If the
user name and password are valid, the authentication service starts a user service
under the user’s account. Thereafter, all NetBackup administrative tasks are
performed through an instance of the user service. Additional user service processes
are initiated to process requests from the console.
Table 13-1 describes how to create detailed debug logging for the NetBackup
Administration Console.
Step Description
■ install_path\NetBackup\logs (Windows)
■ /usr/openv/netbackup/logs (UNIX)
debugMask=0x00040000
On UNIX, change the file on the UNIX machine where you run the jnbSA or jbpSA commands.
If you use the NetBackup Remote Administration Console, change the file in the following locations:
/usr/openv/java
install_path\VERITAS\java
Step 3 If you use the Remote Administration Console, edit the nbjava.bat file to redirect output to a file:
install_path\VERITAS\java\nbjava.bat
Note: The following processes are used: bpjava-msvc, which controls the login
and authentication; bpjava-susvc, which is the administration console process;
and bpjava-usvc, which is the client Backup, Archive, and Restore (BAR) interface.
1. The user initiates a login to the console. The credentials are sent to
bpjava-msvc over the SSL (using the Server Security Certificate).
2. The bpjava-msvc process authenticates the user who uses the user credentials
that were received in step 1.
3. After the user is authenticated, the bpjava-msvc process performs the following:
■ Generates the entities that are called the self-signed session certificate,
the key, and the session token.
■ Launches the daemon bpjava-*usvc to gather more requests from the
NetBackup Administration Console.
■ Passes the self-signed session certificate and the session token to
bpjava-*usvc.
■ Sends the session token and the fingerprint of the session certificate to the
NetBackup Administration Console.
■ Persists session token and user information to a secure directory
(install_path/var; for example, /usr/openv/var) in a file on the
NetBackup host. This directory is accessible only to the root/administrator.
The file name format is as follows:
hash(session token)_bpjava-*usvc_pid
4. bpjava-*usvc uses the session certificate to start the secure channel with the
NetBackup Administration Console. This secure channel is a one-way
NetBackup Administration Console logging 166
Setting up a secure channel between the NetBackup Administration Console and either nbsl or nbvault
authenticated SSL channel. (Only the server certificate is present and there is
no peer certificate. There is no certificate from the NetBackup Administration
Console side.)
5. The NetBackup Administration Console receives the session certificate as a
part of the initial SSL handshake. It verifies the authenticity of the session
certificate by using the pre-existing fingerprint of the session certificate (see
step 3). The NetBackup Administration Console calculates the fingerprint of
the session certificate that was received from bpjava-*usvc due to the SSL
handshake. It compares the new fingerprint with the fingerprint sent by msvc.
6. Once the authenticity of the certificate is verified, the NetBackup Administration
Console sends the session token (received in step 3) to bpjava-*usvc.
7. bpjava-*usvc verifies the received session token with the pre-existing one
(see step 3).
8. The success of the session token validation creates trust between
bpjava-*usvc and the NetBackup Administration Console.
hash(session token)_susvc_pid
4. This secure channel is a one-way authenticated SSL channel where only the
server certificate is present and there is no peer certificate. There is no
certificate from the NetBackup Administration Console side.
5. The trust options for the security certificate are as follows:
■ The NetBackup Administration Console accepts the security certificate (or
gives approval for this secure channel) if it trusts the NetBackup Certificate
Authority (CA) who signed the security certificate.
■ If the NetBackup Administration Console does not trust the CA who signed
the security certificate, it displays a pop-up dialog box. This dialog box asks
if the user trusts the CA who has signed the certificate (This is a one-time
activity. After the user gives consent to trust the CA, the dialog box does
not display again.).
8. The success of the verification creates a trust between nbsl/nbvault and the
NetBackup Administration Console.
9. All further communication occurs between nbsl/nbvault and the NetBackup
Administration Console on this trusted secure channel.
■ Windows: install_directory\netbackup\logs\user_ops\nbjlogs\
The Java GUI logs are located in the following log directories for non-root and
non-administrator users:
■ UNIX: /usr/openv/netbackup/logs/user_ops/nbjlogs/<non-root-username>
■ Windows:
install_directory\netbackup\logs\user_ops\nbjlogs\<non-admin-username>
The administrator needs to create the non-root username directories under the
nbjlogs directory using mklogdir -user username -group groupname command
which is present in the NetBackup legacy log folder. If these username directories
are not created with appropriate write permission for that user, then the users home
directory is used for logging. The nbjlogs folder is created in the user’s home
directory first and all logs appear in this folder. If the home directory is not accessible,
the logs are redirected to console. The administrator can also use the mklogdir
command to create a specific log directory for a specific user. For example, use
the mklogdir -create user_ops/nbjlogs -user username -group groupname
command to create this directory.
C:\Program Files\Veritas\NetBackup\logs\user_ops\nbjlogs
install_path\Veritas\Java\setconf.bat
C:\Program Files\Veritas\NetBackup\logs\user_ops\nbjlogs
NetBackup Administration Console logging 169
Configuring and gathering logs when troubleshooting NetBackup Administration Console issues
install_dir\VERITAS\Java\Debug.properties
printcmds=true
debugMask=0x00040000
1. Gather the following NetBackup Administration Console logs from the following
pre-existing log directories on the system from which the console was started:
The Java GUI logs are located in the following log directories for root and
administrator users:
■ UNIX: /usr/openv/netbackup/logs/user_ops/nbjlogs/
■ Windows: install_directory\netbackup\logs\user_ops\nbjlogs\
The Java GUI logs are located in the following log directories for non-root and
non-administrator users, the Java GUI logs are located in the following log
directories:
■ UNIX:
/usr/openv/netbackup/logs/user_ops/nbjlogs/<non-root-username>
■ Windows:
install_directory\netbackup\logs\user_ops\nbjlogs\<non-admin-username>
■ /usr/openv/netbackup/logs/bpjava-msvc
■ /usr/openv/netbackup/logs/bpjava-susvc
■ /usr/openv/netbackup/logs/bpjava-usvc
ADMIN_VERBOSE = 5
BPJAVA-MSVC_VERBOSE = 5
BPJAVA-SUSVC_VERBOSE = 5
BPJAVA-USVC_VERBOSE = 5
■ install_dir\VERITAS\NetBackup\logs\bpjava-msvc
■ install_dir\VERITAS\NetBackup\logs\bpjava-susvc
■ install_dir\VERITAS\NetBackup\logs\bpjava-usvc
ADMIN_VERBOSE = 5
BPJAVA-MSVC_VERBOSE = 5
BPJAVA-SUSVC_VERBOSE = 5
BPJAVA-USVC_VERBOSE = 5
6. Run the following commands to set up detailed logging for nbatd (OID 18) and
nbsl (OID 132). OID 137 (NetBackup libraries) and OID 156 (CORBA/ACE)
write to the caller that requires access to either the libraries or CORBA/ACE,
as follows:
vxlogcfg -a -p NB -o 18 -s DebugLevel=6
vxlogcfg -a -p NB -o 132 -s DebugLevel=6
NetBackup Administration Console logging 171
Undo logging
7. Gather the nbatd and nbsl logs that are located in the following directory paths:
For UNIX:
■ /usr/openv/logs/nbsl
■ /usr/openv/logs/nbatd
For Windows:
■ install_dir\VERITAS\NetBackup\logs\nbsl
■ install_dir\VERITAS\NetBackup\logs\nbatd
Undo logging
Ensure that you undo the logging after you have gathered the logs that relate to
your troubleshooting issue.
To remove the log configuration settings, use the following commands:
vxlogcfg -r -p NB -o 18 -s DebugLevel=6
vxlogcfg -r -p NB -o 132 -s DebugLevel=6
vxlogcfg -r -p NB -o 137 -s DebugLevel=6
vxlogcfg -r -p NB -o 156 -s DebugLevel=6
On the master server, comment out the following Java VERBOSE entries in the
bp.conf file (UNIX) or in the registry (Windows):
■ ADMIN_VERBOSE
■ BPJAVA-MSVC_VERBOSE
■ BPJAVA-SUSVC_VERBOSE
■ BPJAVA-USVC_VERBOSE
Chapter 14
Using the Logging
Assistant
This chapter includes the following topics:
Note: Use the Logging Assistant under the guidance of Veritas Support.
possible hosts that may be involved in the problem and the logs that should be
enabled on those hosts.
Note: While collecting NetBackup logs using Logging Assistant, the total NetBackup
log size may increase. If you have enabled the Keep logs up to GB property on
the Host Properties > Logging dialog box and the total NetBackup log size reaches
its high water mark, logs are deleted. Logs that you want to retain may also be
deleted. To avoid the deletion of logs that you want to retain, you need to disable
the Keep logs up to GB property while you collect logs using the Logging Assistant.
Alternatively, you can set the Keep logs up to GB property to a value higher than
the current value, so that the important logs are not deleted before the log collection
is complete.
No special licensing is required. However, you must have root permissions for UNIX
and administrator privileges for Windows to use the Logging Assistant.
Table 14-1 shows a summary of the main Logging Assistant operations.
Operation Description
Add a new Logging Assistant Add a Logging Assistant record that you use throughout the process of troubleshooting
record. a NetBackup problem. Typically, you associate the record that you create with a failed
job that appears in the Activity Monitor. A list of records appears when you select the
Logging Assistant node in the right pane of the NetBackup Administration Console.
Delete a Logging Assistant After the failed job runs successfully, you can delete the Logging Assistant record.
record.
See “Adding or deleting a Logging Assistant record” on page 176.
Enable debug logging. Use the Setup Debug Logging Wizard to enable selected NetBackup debug logs and
other processes that Technical Support uses to troubleshoot NetBackup problems.
Logging Assistant automatically creates the necessary log folders and sets the log
levels of the debug logs to the highest verbosity. (The highest log level of many of the
debug logs is 5).
See “Setting up debug logging” on page 178.
Using the Logging Assistant 174
Logging Assistant sequence of operation
Operation Description
Set minimum debug logging. Use the Set Minimum Debug Logging Wizard to set the specified process log levels
(verbosity) to a minimum value. This setting still allows info, warning, error, and critical
messages (legacy logging), and application logs, diagnostic logs, and some debug
logs (unified logging). You may want to set the debug logging to minimum values after
you resolve the job failure problem for the selected Logging Assistant record.
Disable debug logging. Use the Disable Debug Logging Wizard to disable the debug logging after you resolve
the job failure problem for the selected Logging Assistant record. The only logs that
NetBackup continues to generate are application logs and diagnostic logs.
Collect nbsu output. Use the Collect nbsu Output Wizard to gather the nbsu diagnostic information onto
the master server.
Cancel operation. After you complete collection, you can cancel the operation if it is currently in progress
(for example, if the data is too large and the operation is time-consuming). Check that
the progress field of this record displays In progress, then right-click the Logging
Assistant record and select Cancel Operation.
Step 1 Create a Logging Assistant Create a Logging Assistant record to troubleshoot a NetBackup problem.
record. You normally associate the record with a failed job that appears in the Activity
Monitor.
Step 2 Enable debug logging. Use the Setup Debug Logging Wizard to enable selected NetBackup debug
logging that Technical Support uses to troubleshoot NetBackup problems.
Step 3 Rerun the failed job. Go to the Activity Monitor and rerun the failed job. NetBackup generates the
debug logs that you have enabled.
Using the Logging Assistant 175
Viewing the Logging Assistant records
Step 4 Collect data. You can collect debug logs, nbsu diagnostics, and additional evidence.
Technical Support may want you to run the NetBackup Support Utility (nbsu)
first to get diagnostic information. You can also collect the evidence that
supports the debug logs and nbsu diagnostic information.
Step 5 Troubleshoot the problem. Work with Technical Support to read and analyze the debug logs, nbsu
diagnostics, and evidence, and correct any problems you detect.
Step 6 Rerun the failed job. After you take corrective actions, retry the operation. If the job still fails, work
with Technical Support to identify and enable additional debug logs using
the same Logging Assistant record. Repeat steps 2-6 until the job runs
successfully.
Step 7 Disable or set minimum Disabling debug logging automatically removes the log directories and
debug logging. disables all debug logging messages. Minimum debug logging disables all
messages except application logs and diagnostic logs.
Step 8 Delete the record. Remove the Logging Assistant record from the list of records.
Record status Record created: You added this record to the Logging Assistant with
Add a New Logging Assistant Record.
Debug logging set up: You completed the Setup Debug Logging
Wizard for this record.
Debug Logging partially set up: You set up debug logging for all the
selected hosts and processes with the Setup Debug Logging Wizard,
but not all the hosts and processes have been verified.
Debug logs collected: You completed the Collect Debug Logs Wizard.
nbsu output collected: You have completed the Collect nbsu Output
Wizard.
Progress The progress of the current activity being performed for the Logging
Assistant record.
Staging Directory The output location where the debug logs and other troubleshooting
information is collected.
Record creation The date and time you created this record.
time
Record last The date and time that you performed the most recent activity on the
modified record.
Debug logging set The date and time when you completed the Setup Debug Logging
up time Wizard.
6 Click OK to create a Logging Assistant record in its database and add it to the
list of records in the Logging Assistant Records pane.
Warning: Before deleting the record, ensure that logging is disabled or set to
minimum.
Note: Ensure that each of the selected hosts contains enough available space for
the selected debug logs.
you want to set up debug logging. Separate the client names by commas.
Do not use any spaces between the client names.