跳转到主内容

ARP在检测到新扩展后会延迟创建快照

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • 自主防兰森(ARP)
  • 仅检测新扩展类型

问题描述

检测到新的扩展类型文件后、ARP会在大约15分钟后创建一个反勒索软件备份快照。
  • 检测时间:

::> security anti-ransomware volume show -vserver svm1 -volume test1
Vserver Name: svm1
Volume Name: test1
State: enabled
Dry Run Start Time: -
Attack Probability: low
Attack Timeline: 6/21/2024 16:53:08
Number of Attacks: 1

  • 创建快照时间:

::> volume snapshot show -vserver svm1 -volume time1 -time
Vserver  Volume  Snapshot                           Create Time
-------- ------- ---------------------------------- -------------------------
svm1
        test1
                 22h_snap.2024-06-20_2200           Thu Jun 20 22:00:00 2024
                 Anti_ransomware_backup.2024-06-21_1707    Fri Jun 21 17:07:21 2024
                22h_snap.2024-06-21_2200           Fri Jun 21 22:00:00 2024