Dell PowerProtect Cyber Recovery 19.16 Alerts and Events Reference Guide

PDF

Critical system alerts

The following table lists the Cyber Recovery system alerts with a Critical severity.

Table 1. Critical system alert informationThe table lists the Alert IDs, message summarys, summary details, and suggested remedies for system alerts with the critical severity.
Alert ID	Message Summary	Summary Details	Remedy
1001	Unable to unlock the Cyber Recovery Vault.	Cyber Recovery was unable to unlock the vault to perform a replication.	Check the connections to the firewall or the storage system. Verify that there are no changes to any ssh/security/logins to the storage or firewall settings. Check switch/network connections to and from the vault.
1002	Unable to unmount the recovery sandbox from the host.	Unable to unmount the recovery sandbox from the application host in the vault.	Verify the mount location and ensure that it is not in use. Verify that the host is available.
1003	Unable to mount the recovery sandbox to the host.	Unable to mount the recovery sandbox to the application host in the vault.	Verify connectivity to the host. Verify that mount packages are available on the host. Verify that the directory on which to mount the sandbox is not in use.
1004	Unable to run the job for the policy.	Unable to obtain enough information to run the job for the policy.	Verify that the policy exists and that the policy definition is complete.
1005	Failed to assign a different role to the user.	An attempt was made to assign a different role to the user.	Verify the requesting Cyber Recovery admin's permission to assign a different role to the user. Ensure that the Cyber Recovery admin assigns a lesser role to the user; the admin cannot assign a role with greater privileges.
1006	Unable to analyze the point-in-time copy.	An error occurred during a point-in-time copy analysis.	Verify that the vault application performing the analysis is accessible. Verify that the recovery sandbox on storage is accessible to the vault application. Verify the vault application credentials.
1010	Unable to initiate a replication synchronization into the vault because an admin secured the vault.	A replication synchronization cannot be performed because the vault is Secured.	The vault is Secured. Contact a Cyber Recovery admin to release the lock on the vault manually.
1011	Failed to update user details.	Failed to update user details due to insufficient permissions.	Only the Cyber Recovery Security Officer can update details.
1016	The user is suspended for exceeding the maximum login attempts.	The user exceeded the maximum login attempts and has been disabled.	Contact the Cyber Recovery Security Officer to enable the user account.
1018	The Cyber Recovery license expired.	The Cyber Recovery license expired.	Locate the Instance Id of the Cyber Recovery software. Acquire the license file from Dell Technologies. Activate the license by using the license file.
1019	The Cyber Recovery license is invalid.	The license file provided is invalid.	Locate the Instance Id of the Cyber Recovery software. Acquire the license file from Dell Technologies. Activate the license by using the license file.
1026	Unable to run scheduled analysis on policy.	Failed to run the scheduled analysis on the policy; apply the following remedies and ensure that all requirements are met.	Ensure that there is at least one point-in-time copy of the policy on which to run the scheduled analysis. Ensure that the application selected for the analysis has the minimum required version installed. Ensure all CyberSense application services are up and running. Ensure that the CyberSense asset includes a DD Boost user if running CyberSense version 7.8 and later.
1029	Unable to initiate the Sheltered Harbor input validation action.	An attempt to start a Sheltered Harbor validation job is unsuccessful.	Verify that the Sheltered Harbor service is running.
1030	Unable to initiate the Sheltered Harbor data certification action.	An attempt to start a Sheltered Harbor certification job is unsuccessful.	Verify that the Sheltered Harbor service is running.
1031	Unable to initiate the Sheltered Harbor reporting action.	An attempt to start a Sheltered Harbor reporting job is unsuccessful.	Verify that the Sheltered Harbor service is running.
1033	The Sheltered Harbor service is unable to send a failed job error indication outside the vault.	The Sheltered Harbor service was unable to send a failed job error indication outside the vault to a configured legal entity e-mail.	Verify that the Sheltered Harbor service is running.
1034	Unable to run scheduled recoveryCheck on policy.	Unable to run scheduled recoveryCheck on policy.	Ensure that there is at least one point-in-time copy of the policy on which to run the scheduled recoveryCheck.
1037	Unable to schedule the next run on the DR Backup Schedule.	Unable to update the next run on the DR Backup Schedule when kicking off the current backup.	Verify the health of the Mongo DB service. Try to update the next run on the DR Backup Schedule manually.
1038	Services are down.	One or more services are down.	Generate a support log bundle. Restart the services using crsetup.sh --start/--stop. If services do not come up, contact support.
1042	Password is about to expire.	Password is about to expire.	Change your password: In the UI, go to User Settings on the masthead navigation. Click Change Password and change the password based on the password policy. In the CRCLI, run the 'crcli users modify --username xxx --password' command and change the password based on the password policy. Make sure that you change the password before it expires.
1043	Password has expired.	Password has expired.	Change your password: In the UI, go to User Settings on the masthead navigation. Click Change Password and change the password based on the password policy. In the CRCLI, run the 'crcli users modify --username xxx --password' command and change the password based on the password policy. Make sure that you change the password before it expires.
1052	Unable to retrieve the job status from the application selected for analysis.	Unable to retrieve jobstatus from the application selected for analysis.	From the Cyber Recovery host, SSH into the CyberSense host selected for analysis. Verify that all the services used for analysis are up by running dservice status all command.
1055	Unable to email generated report.	Failed to send report with given email configurations.	Verify the mail server configuration on the Cyber Recovery support page. Check if the email is in Allowable Domains in the mail server configuration. Verify that the Cyber Recovery services are up by running 'docker ps' on the Cyber Recovery host.
1056	A CyberSense-to-DD network link error has been detected.	The CyberSense monitoring thread has detected a network link error in the multilink definition between the CyberSense host and a DD host. In the installed version of CyberSense, analyze operations associated with a multilink definition do not start until all links are active.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses in the multilink. configuration. Verify that the CyberSense host network interface is enabled and working properly. Verify that the DD host network interface is enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host. If a hardware issue is preventing the link from becoming active, the link may be removed as a temporary fix while the issue is being addressed. Note that removing a link might cause performance issues with analysis.
1057	A multilink object definition is in an inactive or degraded state.	During multilink configuration, a configured multilink object definition in an inactive or degraded state was detected. In the installed version of CyberSense, analyze operations associated with a multilink definition do not start until all links are active.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses in the multilink configuration. Verify that the CyberSense host network interfaces in the inactive links are enabled and working properly. Verify that the DD host network interfaces in the inactive links are enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host. If a hardware issue is preventing the link from becoming active, the link may be removed as a temporary fix while the issue is being addressed. Note that removing a link might cause performance issues with analysis.
1058	A multilink object definition is in an inactive/degraded state or links in it are in an inactive state.	When attempting to perform an analyze or secure analyze operation, a configured multilink object definition is detected to be in an inactive/degraded state; or links within it are detected to be in an inactive state.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses in the multilink configuration. Verify that the CyberSense host network interfaces in the inactive links are enabled and working properly. Verify that the DD host network interfaces in the inactive links are enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host. If a hardware issue is preventing the link from becoming active, the link may be removed as a temporary fix while the issue is being addressed. Note that removing a link might cause performance issues with analysis.
1059	A multilink object definition is marked as failed because it is found on the Cyber Recovery system but not on the CyberSense system.	The CyberSense monitoring thread has detected that a multilink object definition exists on the Cyber Recovery system but does not exist on the CyberSense system. The multilink object definition is marked as failed. Analyze operations using this multilink definition will not start.	In the UI, go to the CyberSense assets page and use the Edit/Configure option for the Interface Links to view the configured multilink object definitions. Resubmit the multilink object definition that is marked as failed. Add or verify DD Boost users on the CyberSense system. Verify link connectivity on the Cyber Recovery system after approximately 5 minutes.
1062	A failure occurred while creating default multilink object definitions. The 'AnalyzeIndexAsID' field of one or more previously analyzed policies could not be updated.	When attempting to create default multilink object definitions, the 'AnalyzeIndexAsID' field of one or more previously analyzed policies could not be updated. This field is used to consistently identify policies on the CyberSense server before and after upgrade to multilink and may cause long analysis times and licensing overdraft issues if not properly updated.	Contact support engineering to fix this issue before running analyze operations on CyberSense 8.2 systems.
1063	A CyberSense-to-DD network link error has been detected.	The CyberSense monitoring thread has detected a network link error in the multilink definition between the CyberSense host and a DD host. Analyze operations involving this multilink definition might run longer than expected due to the inactive link.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses in the multilink configuration. Verify that the CyberSense host network interface is enabled and working properly. Verify that the DD host network interface is enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host.
1064	A multilink object definition is in an inactive or degraded state.	During multilink configuration, a configured multilink object definition in an inactive or degraded state was detected. Analyze operations involving this multilink definition will not run if it is inactive or might run longer than expected if it is degraded.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses contained in the multilink configuration. Verify that the CyberSense host network interfaces in the inactive links are enabled and working properly. Verify that the DD host network interfaces in the inactive links are enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host.
1065	A multilink object definition is in an inactive state or all the links in the definition are in an inactive state.	When attempting to perform an analyze or secure analyze operation, a configured multilink object definition in an inactive state is detected; or all the links in the definition are inactive.	Verify that there is a DD Boost user with valid credentials configured on the CyberSense host for at least one of the DD IP addresses in the multilink configuration. Verify that the CyberSense host network interfaces in the inactive links are enabled and working properly. Verify that the DD host network interfaces in the inactive links are enabled and working properly. Verify that the cabling and switches between the interfaces are working properly. Verify that each DD IP address in the multilink definition is reachable from the CyberSense host.
1067	The user account is disabled.	The user attempted to log in but the account is disabled by the Cyber Recovery Security Officer.	Contact the Cyber Recovery Security Officer to enable the user account.
1068	Failed to run analyze operation due to missing multilink definition.	When attempting to perform an analyze or secure analyze operation, a configured multilink definition is not found for the storage that is defined in the policy.	In the UI, go to the CyberSense assets page and click Edit/Configure for the CyberSense asset that you want to use for analysis. Add a multilink definition for the storage that is defined in the policy. In the UI, return to the CyberSense assets page and click Edit/Configure to view the configured multilink definition and verify that it is not in an inactive or failed state.
1069	Unable to configure multilink definitions.	An attempt to configure multilink definitions failed. Analyze operations involving the failed multilink definition will not run. See additional details section for more information.	Contact support if you continue to see this problem.