💾 ToastVault
Home · Blueprint

Section 5 Analytics, Monitoring & Observability

Exam weight 13%

trapmemorisedefault valuetiplab Rate yourself: ○ not yet · ◐ shaky · ● know it (saved in this browser)

  1. 5.1 Veeam ONE architecture
  2. 5.2 Alarms
  3. 5.3 Dashboards, views and protected workloads
  4. 5.4 Capacity planning and reports

Objective 5.1 Veeam ONE architecture

3 cards practice questions

On the official blueprint

• Veeam ONE alarms
• Dashboards
• Monitoring views
• Protected workloads
• Capacity planning
• Infrastructure reports
• SLA reports
• Executive reports

5.1.1 Veeam ONE architecture

• Veeam ONE Server · Job: Runs the Monitoring service (collects data, raises alarms) and the Reporting service.
• Veeam ONE Web Services / Web Client · Job: Browser interface for dashboards, reports and (v13) alarms.
• Veeam ONE Client · Job: Desktop client for real-time monitoring and alarm management.
• Veeam Analytics Service · Job: Installed on backup servers. Collects VBR data and sends it to Veeam ONE.
• Database · Job: Microsoft SQL Server holds the main database.

NEW

Veeam Analytics Service replaces the old Veeam ONE Agent. A PostgreSQL reporting database speeds up large reports and reduces the load on SQL Server.

• 1239 · Purpose: Web Client in the browser
• 2714 · Purpose: Monitoring service
• 2742 · Purpose: Reporting service
• 2741 · Purpose: Web API
• 2805 · Purpose: Veeam Analytics Service → Veeam ONE (data collection)
• 1433 · Purpose: SQL Server database

MEMORISE

1239 is the web client. 2805 is the data collection port from backup servers.

Official docs for 5.1 (1)

Objective 5.2 Alarms

1 cards practice questions

5.2.1 Alarms

• Hundreds of predefined alarms for vSphere, Hyper-V, Veeam Backup & Replication and Veeam Backup for Microsoft 365.
• Each alarm has rules (conditions) and a severity: Error or Warning. When the condition clears, the alarm becomes Resolved.
• Notifications: email, SNMP trap, or run a script.
• Remediation actions: an alarm can trigger a fix, either automatically or after someone approves it.
• You can acknowledge an alarm, suppress alarms (for example during a maintenance window) or create custom alarms.

MEMORISE

Security alarms to know: Possible ransomware activity and Suspicious incremental backup size. A sudden jump in increment size can mean data is being encrypted.

NEW

Alarms Overview in the Web Client, and Threat Center integration (Malware Detections Map, Malware Detections report).

Official docs for 5.2 (1)

Objective 5.3 Dashboards, views and protected workloads

1 cards practice questions

5.3.1 Dashboards, views and protected workloads

• Dashboards (Web Client): widgets showing infrastructure and backup health. Drag and drop to customise.
• Monitoring views: infrastructure view (hosts, clusters, VMs) and data protection view (backup servers, jobs, repositories).
• Business View: groups objects into categories that match the business (by department, SLA, location or vSphere tags). Reports and alarms can then be scoped by category.
• Protected workloads: which VMs and machines have a recent restore point and which are unprotected.

TRAP

A VM missing from every backup job does not create a job failure. Only a protected-workloads report or alarm shows that it is unprotected.

Official docs for 5.3 (2)

Objective 5.4 Capacity planning and reports

1 cards practice questions

5.4.1 Capacity planning and reports

• Capacity planning: predicts when a repository or a host cluster will run out of resources, based on growth trends. Answers “how many days until the repository is full?”.
• Infrastructure reports: inventory, performance, configuration changes.
• SLA reports: whether jobs met their RPO targets.
• Executive reports: short summaries for management.
• Reports can be scheduled and emailed. Export as PDF or CSV.

NEW

New interactive reporting engine, a Reports Catalog with Global Search, and Veeam Intelligence (an AI assistant) in the Web Client.

Official docs for 5.4 (1)