BIS Advanced Solutions and Design Team: July 2016

Friday, July 1, 2016

Task 'Back up to 'QNAP' ASPSERV_LIVE' has failed on machine 'AcronisAppliance'.

Backup has failed. Please check the log for additional information.
1 Information 7/1/16 6:30:02 PM Task 'Back up to 'QNAP' ASPSERV_LIVE' changed its state from 'idle' to 'running'.
2 Information 7/1/16 6:30:02 PM Task 'Back up to 'QNAP' ASPSERV_LIVE' was started.
3 Information 7/1/16 6:30:02 PM Backing up VM(s).
4 Information 7/1/16 6:30:02 PM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
5 Information 7/1/16 6:30:02 PM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
6 Information 7/1/16 6:30:02 PM Task 'Back up to 'QNAP' ASPSERV_LIVE' changed its state from 'running' to 'idle'.
7 Error 7/1/16 6:30:02 PM Task 'Back up to 'QNAP' ASPSERV_LIVE' failed: 'Failed to create a backup.
Additional info:
--------------------
Error code: 3
Module: 435
LineInfo: 555b5abba0950340
Fields:
Message: Failed to create a backup.
--------------------
Error code: 32786
Module: 114
LineInfo: 28314c961de7d337
Fields:
Message: Failed to prepare for backing up.
--------------------
Error code: 32853
Module: 114
LineInfo: e8aa69772494a242
Fields:
Message: Failed to check licenses for the instance with ID '964A22AA-8DA5-5E27-DEF9-4ECC474FDE65'.
--------------------
Error code: 14
Module: 202
LineInfo: 9f8a25ba610a0eb1
Fields:
Message: Failed to get licenses for host with ID 964A22AA-8DA5-5E27-DEF9-4ECC474FDE65.
--------------------
Error code: 12
Module: 202
LineInfo: 9f8a25ba610a0eac
Fields:
Message: Failed to obtain license for ESX host. Please check licenses assignment.
--------------------'.

Task 'Back up to 'Network'' has succeeded on machine 'AcronisAppliance'.

Backup has been successfully completed.
1 Information 7/1/16 1:30:01 PM Task 'Back up to 'Network'' changed its state from 'idle' to 'running'.
2 Information 7/1/16 1:30:01 PM Task 'Back up to 'Network'' was started.
3 Information 7/1/16 1:30:02 PM Backing up VM(s).
4 Information 7/1/16 1:30:03 PM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
5 Information 7/1/16 1:30:03 PM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
6 Information 7/1/16 1:30:03 PM Successfully connected to 'VMware ESXi 5.5.0 build-1623387' through VMware vCenter Server.
7 Information 7/1/16 1:30:03 PM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
8 Information 7/1/16 1:30:04 PM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
9 Information 7/1/16 1:30:05 PM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
10 Information 7/1/16 1:30:05 PM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
11 Information 7/1/16 1:30:05 PM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
12 Information 7/1/16 1:30:36 PM Creating snapshot (7/1/16 1:30:05 PM).
13 Information 7/1/16 1:30:36 PM Loading virtual machine 'vm://E700EAA4-59DD-40FC-8BFA-12B859E92816/50140887-c77b-7b19-4689-14508607f6a5?host=host-63&type=vmwesx' into the disk subsystem.
14 Information 7/1/16 1:30:36 PM Opening virtual disk '[datastore 103] OraDBServ2/OraDBServ2.vmdk' via network because it's located on directly inaccessible storage.
15 Information 7/1/16 1:30:36 PM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
16 Information 7/1/16 1:30:36 PM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
17 Information 7/1/16 1:30:36 PM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
18 Information 7/1/16 1:30:38 PM Analyzing partition 'C:'...
19 Information 7/1/16 1:30:38 PM Analyzing partition 'D:'...
20 Information 7/1/16 1:30:40 PM Analyzing partition '1-0'...
21 Information 7/1/16 1:30:41 PM Create Incremental Backup From: Disk '1' To file: "avfs:/smb?//10.1.1.250/Public/OraDBserv2/Archive(2).TIB" Compression: Normal Exclude: Files matching mask Match criterion:
22 Information 7/1/16 1:30:42 PM Backing up additional file 'OraDBServ2-000001.vmdk'.
23 Information 7/1/16 1:30:42 PM Backing up additional file 'OraDBServ2.nvram'.
24 Information 7/1/16 1:30:42 PM Backing up additional file 'OraDBServ2.vmdk'.
25 Information 7/1/16 1:30:43 PM Backing up additional file 'OraDBServ2.vmx'.
26 Information 7/1/16 1:30:43 PM Backing up additional file 'OraDBServ2.vmxf'.
27 Information 7/1/16 1:30:43 PM Backing up additional file 'vss_manifests.zip'.
28 Information 7/1/16 1:30:45 PM Pending operation 153 started: 'Creating partition image'.
29 Information 7/1/16 1:31:44 PM CBT (Changed Block Tracking) information has been successfully retrieved.
30 Information 7/1/16 1:33:16 PM Pending operation 153 started: 'Creating partition image'.
31 Information 7/1/16 1:34:06 PM CBT (Changed Block Tracking) information has been successfully retrieved.
32 Information 7/1/16 1:36:06 PM Pending operation 150 started: 'Saving partition structure'.
33 Information 7/1/16 1:36:07 PM Remove snapshot (snapshot-9148).
34 Information 7/1/16 1:36:09 PM Task 'Back up to 'Network'' changed its state from 'running' to 'idle'.
35 Information 7/1/16 1:36:13 PM Task 'Back up to 'Network'' succeeded.

High-Risk Intrusion Detected on BISFORMSERV

A high-risk intrusion was detected on BISFORMSERV within group BIS Servers on 7/1/2016 10:13:56 AM.

IPS Alert Name
Attack: an intrusion attempt was blocked.

Status
Blocked

Attack Signature
OS Attack: GNU Bash CVE-2014-6271

Targeted Application
N/A

Targeted IP
198.251.79.98

Targeted Port Number
N/A

Targeted Host Name
N/A

Contact method: Phil Albanese Ref# 400045	Copyright © 2016 Symantec Corporation. All Rights Reserved.

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________

Task 'Full backup' has succeeded on machine 'BIS-DC.bisintranet.com'.

1 Information 7/1/2016 5:00:03 AM Command 'Running backup plan 'BIS-DC Full Backup'' is running.
2 Information 7/1/2016 5:00:06 AM Command 'Backing up' is running.
3 Information 7/1/2016 5:00:16 AM Analyzing partition '1-0'...
4 Information 7/1/2016 5:00:17 AM Create Full Backup
From: Disk '1'
To file: "file://bisqnap\Public\BIS_DC\bisdc-acronis_2016_07_01_05_00_16_377D.TIB"
Compression: Normal
Exclude: Files matching mask
Match criterion: *\System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752}; ...
Ask for the first media: No

5 Information 7/1/2016 5:00:17 AM Pending operation 157 started: 'Creating partition image (System Reserved ())'.
6 Information 7/1/2016 5:00:17 AM Locking partition 1-1...
7 Information 7/1/2016 5:00:18 AM Pending operation 157 started: 'Creating partition image (No label (C))'.
8 Information 7/1/2016 5:00:18 AM Locking partition C:...
9 Information 7/1/2016 5:06:22 AM Pending operation 154 started: 'Saving partition structure (Hard disk 1)'.
10 Information 7/1/2016 5:06:24 AM Command 'Backing up' has completed successfully.
11 Information 7/1/2016 5:06:40 AM Command 'Replicating backups/cleaning up archives (1st location)' is running.
12 Information 7/1/2016 5:08:43 AM Backup archive deletion has started.
13 Information 7/1/2016 5:08:43 AM Backup archive deletion has successfully completed.
14 Information 7/1/2016 5:08:51 AM Command 'Replicating backups/cleaning up archives (1st location)' has completed successfully.
Task 'Full backup' has succeeded on machine 'BIS-DC.bisintranet.com'.

High-Risk Intrusion Detected on BISAPPSERV.bisintranet.com

A high-risk intrusion was detected on BISAPPSERV.bisintranet.com within group BIS Servers on 7/1/2016 2:54:38 AM.

IPS Alert Name
Attack: an intrusion attempt was blocked.

Status
Blocked

Attack Signature
OS Attack: GNU Bash CVE-2014-6271

Targeted Application
N/A

Targeted IP
50.62.134.2

Targeted Port Number
N/A

Targeted Host Name
N/A

Contact method: Phil Albanese Ref# 400045	Copyright © 2016 Symantec Corporation. All Rights Reserved.

Task 'Orraappserv2_Full' has succeeded on machine 'AcronisAppliance'.

Backup has been successfully completed.
1 Information 7/1/16 2:00:01 AM Task 'Orraappserv2_Full' changed its state from 'idle' to 'running'.
2 Information 7/1/16 2:00:01 AM Task 'Orraappserv2_Full' was started.
3 Information 7/1/16 2:00:03 AM Backup deletion
4 Information 7/1/16 2:00:05 AM 1 backup(s) have been deleted from archive Oraappserv2_Full.TIB.
5 Information 7/1/16 2:00:05 AM Backup deletion has successfully completed.
6 Information 7/1/16 2:00:05 AM Backing up VM(s).
7 Information 7/1/16 2:00:06 AM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
8 Information 7/1/16 2:00:06 AM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
9 Information 7/1/16 2:00:06 AM Successfully connected to 'VMware ESXi 5.5.0 build-1623387' through VMware vCenter Server.
10 Information 7/1/16 2:00:06 AM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
11 Information 7/1/16 2:00:07 AM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
12 Information 7/1/16 2:00:07 AM The VMware Tools are not installed or are outdated on the following virtual machines: 'OraAppserv2_Live'. Snapshots of these virtual machines may be inconsistent and source file exclusion is not supported.
Additional info:
--------------------
Error code: 32861
Module: 114
LineInfo: 28314c961de7d31d
Fields:
Message: The VMware Tools are not installed or are outdated on the following virtual machines: 'OraAppserv2_Live'. Snapshots of these virtual machines may be inconsistent and source file exclusion is not supported.
--------------------
13 Information 7/1/16 2:00:08 AM Successfully connected to 'VMware vCenter Server 5.5.0 build-2001466'.
14 Information 7/1/16 2:00:08 AM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
15 Information 7/1/16 2:00:09 AM Successfully connected to 'VMware ESXi 5.5.0 build-1331820' through VMware vCenter Server.
16 Information 7/1/16 2:00:15 AM Creating snapshot (7/1/16 2:00:09 AM).
17 Information 7/1/16 2:00:15 AM Loading virtual machine 'vm://E700EAA4-59DD-40FC-8BFA-12B859E92816/52a222c6-fe07-89d9-ebb2-1957cc4c8a4b?host=host-63&type=vmwesx' into the disk subsystem.
18 Information 7/1/16 2:00:15 AM Opening virtual disk '[datastore 103] OraAppserv2_Live/OraAppserv2_Live.vmdk' via network because it's located on directly inaccessible storage.
19 Information 7/1/16 2:00:16 AM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
20 Information 7/1/16 2:00:16 AM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
21 Information 7/1/16 2:00:16 AM VMware_VDDK: SSL_VerifyX509: Certificate verification is disabled, so connection will proceed despite the error
22 Information 7/1/16 2:00:21 AM Analyzing partition 'C:'...
23 Information 7/1/16 2:00:21 AM Analyzing partition 'D:'...
24 Information 7/1/16 2:00:21 AM Analyzing partition 'E:'...
25 Information 7/1/16 2:00:22 AM Analyzing partition '2-0'...
26 Information 7/1/16 2:00:22 AM Create Incremental Backup From: Disk '1', Dynamic and GPT Volumes To file: "avfs:/smb?//bisqnap/Public/Oraappserv2/Oraappserv2_Full.TIB" Compression: Normal Exclude: Files matching mask Match criterion:
27 Information 7/1/16 2:00:23 AM Backing up additional file 'OraAppserv2_Live-000001.vmdk'.
28 Information 7/1/16 2:00:23 AM Backing up additional file 'OraAppserv2_Live.nvram'.
29 Information 7/1/16 2:00:24 AM Backing up additional file 'OraAppserv2_Live.vmdk'.
30 Information 7/1/16 2:00:24 AM Backing up additional file 'OraAppserv2_Live.vmx'.
31 Information 7/1/16 2:00:24 AM Backing up additional file 'OraAppserv2_Live.vmxf'.
32 Information 7/1/16 2:00:25 AM Pending operation 153 started: 'Creating volume image'.
33 Information 7/1/16 2:07:03 AM CBT (Changed Block Tracking) information has been successfully retrieved.
34 Information 7/1/16 2:10:29 AM Pending operation 153 started: 'Creating volume image'.
35 Information 7/1/16 2:12:37 AM CBT (Changed Block Tracking) information has been successfully retrieved.
36 Information 7/1/16 2:12:49 AM Pending operation 153 started: 'Creating volume image'.
37 Information 7/1/16 2:15:27 AM CBT (Changed Block Tracking) information has been successfully retrieved.
38 Information 7/1/16 2:15:29 AM Pending operation 150 started: 'Saving partition structure'.
39 Information 7/1/16 2:15:30 AM Remove snapshot (snapshot-9142).
40 Information 7/1/16 2:15:31 AM Task 'Orraappserv2_Full' changed its state from 'running' to 'idle'.
41 Information 7/1/16 2:15:34 AM Task 'Orraappserv2_Full' succeeded.