Abstract: In general, in one aspect, the invention relates to a method for managing performances of services, the method comprising: generating subsystem groups, wherein each subsystem group of the subsystem groups comprises a plurality of subsystems, wherein each subsystem group is associated with one a plurality of services, wherein the subsystem groups are generated using per-service subsystem requirements; and performing at least one of the plurality of services using a subsystem group of the subsystem groups.

Abstract: A system for displaying a performance dashboard comprises an input interface, a processor, and an output interface. The input interface is configured to receive log data. The log data comprises a set of process log entries. The processor is configured to determine one or more daemon response times and to determine dashboard information. The dashboard information is based at least in part on the log data and the one or more daemon response times. The output interface is configured to provide the dashboard information.

Abstract: In general, embodiments of the invention relate to a method for generating upgrade recommendations. The method comprising obtaining telemetry data for a target entity, determining, using the telemetry data, at least one of a predicted upgrade time and a upgrade readiness factor for the target entity, generating an recommendation based on the at least one of the predicted upgrade time and the upgrade readiness factor for the target entity, and initiating a display of the recommendation on a graphical user interface of client.

Abstract: Techniques described herein relate to a method for managing performances of data protection services. The method may include obtaining subsystem statistics from subsystems; in response to obtaining the subsystem statistics, making a determination that the subsystem statistics indicate a concurrency adjustment; and in response to the determination, assigning an adjusted concurrency to the subsystems based on the subsystem statistics and priorities; and initiating performance of data protection services using the adjusted concurrency.

Abstract: A method and system for source versus target metadata-based data integrity checking. Concerning backup operations directed to protecting given data, said given data may be subjected to corruption detection at the source prior to initiating a backup operation, however, said given data may not be checked for data integrity following transfer of said given data to a target storage medium prior to committing the said given data thereto. That is, at least presently, the prospect of data corruption compromising given data during the time window through which the given data journeys, usually via a network, from its source to a target storage medium, is often overlooked. The disclosed method and system, accordingly, propose a scheme directed to detecting corruption amongst data transferred from a source to a target storage medium, and handling said data given the determined integrity of said data.

Abstract: A method and system for threat aware data protection. Threat awareness intelligence, directed to preventing information or cyber security issues, are becoming a critical requirement for data protection (or backup) services. Accordingly, a centralized policy framework is proposed through which threat evaluations may be performed synchronously, as well as asynchronously, with data backup operations to ensure the ingestion of threat-free data into backup storage.

Abstract: In general, in one aspect, the invention relates to a method for enabling enhanced logging. The method includes obtaining a log associated with a job; determining, using the log, that enhanced logging is to be enabled prior to initiating the job; enabling, in response to the determination, enhanced logging on at least one node, and initiating servicing of the job, after the enabling, on the at least one node.

Abstract: In general, embodiments of the invention relate to a method for enabling enhanced logging. The method includes obtaining a historical data for a target entity, determining an error probability of the target entity using the historical data, and enabling, based on the error probability, enhanced logging on the target entity.

Abstract: In general, embodiments of the invention relate to a method for enabling enhanced logging. The method includes obtaining historical data for a target entity, determining a steady state error probability of the target entity using the historical data, and enabling, based on the steady state error probability, a first level of enhanced logging on the target entity.

Abstract: Systems and methods for disseminating backup data sets to targets. Backup data sets are classified with an attribute. A gateway device between the backup application and potential target destinations for the backup data set determines where to send the backup data set based on the attribute.

Abstract: One example method includes obtaining hop information of a metadata path for backup metadata, obtaining content sensitivity information indicating a relative sensitivity of backup data to an attack, based on the hop information and the content sensitivity information, selecting an encryption to be applied to the backup metadata, and applying the encryption to the backup metadata. The backup data may be encrypted with the same encryption algorithm that was used to encrypt the backup metadata.

Abstract: One example method includes configuring a data protection environment to include one or more protection targets, applying one or more tags to each of the protection targets, based on the tags, creating a pool that includes some of the protection targets, associating a rule with an SLA that specifies a dataset and a data protection requirement for the dataset, executing the rule to identify a protection target in the pool that most closely meets the data protection requirement specified by the SLA, and defining a data protection policy that includes the data protection target identified by the executing of the rule.

Abstract: Responsibility for protecting a distributed file system is split across different client hosts. Each client host is assigned a subset of the distributed file system to backup. An index host is identified to create a common namespace under which different client file indexes generated by the different client hosts during backups of respective subsets of the file system will be maintained. During backups, different client file indexes are received from the different client hosts. The client file indexes include metadata about files in the file system included in the backups. Each of the different client file indexes are associated to the same common namespace to provide a unified view of all files across all subsets of the file system that have been backed up by the different client hosts.

Abstract: A system for queuing deduplication backup operations comprises an input interface and a processor. The input interface configured to receive a request to perform a deduplication backup operation. The processor is configured to: a) determine a backup operation queue; b) determine whether the deduplication backup operation is at the head of the backup operation queue; c) determine whether the deduplication backup operation is qualified to be executed; and d) in the event the deduplication backup operation is qualified to be executed, execute the deduplication backup operation.

Abstract: Described is a system for utilizing fully dynamic proxies for data flow during data protection. The system determines threshold parameters for each respective virtual proxy in a plurality of virtual proxies. The system receives virtual machine protection data of each respective virtual proxy. The system detects a current data protection workload experienced by each virtual proxy operating according to its respective threshold parameters and virtual machine protection data. The system identifies at least one under-utilized virtual proxy and at least one over-utilized virtual proxy based on the current data protection workload detected on each virtual proxy. The system causes the at least one under-utilized virtual proxy to receive upcoming backup data flow before the at least one over-utilized virtual proxy.

Abstract: A system for managing data protection of virtual machines (VMs) hosted by hosts of data clusters includes a data protection manager. The data protection manager identifies a data protection event associated with at least one VM, obtains, in response the data protection event, data protection rules and a protection policy associated with the at least one VM, spawn, by a monitoring engine orchestrator, a monitoring engine to the data cluster, initiates performance of the data protection services for the at least one VM using a first storage of storages, obtains, after the spawning, monitoring information from the monitoring engine, makes a determination that a data protection rule event of the data protection rule events occurred using the monitoring information, and in response to the determination, initiates the performance of a corrective action of corrective actions based on the data protection rules using a second storage of the storages.

Abstract: Responsibility for protecting a distributed file system is split across different client hosts. Each client host is assigned a subset of the distributed file system to backup. An index host is identified to create a common namespace under which different client file indexes generated by the different client hosts during backups of respective subsets of the file system will be maintained. During backups, different client file indexes are received from the different client hosts. The client file indexes include metadata about files in the file system included in the backups. Each of the different client file indexes are associated to the same common namespace to provide a unified view of all files across all subsets of the file system that have been backed up by the different client hosts.

Abstract: The method includes performing virtual machine (VM) discovery on a transitioned VM to obtain secondary information, classifying, using a tag mapping, the transitioned VM using at least the secondary information to identify a tag, associating the transitioned VM with a backup policy based on the tag, and sending the backup policy and the tag to a production host hosting the transitioned VM.

Abstract: A method for managing storage devices in a backup storage system includes obtaining, by a backup agent, a backup storage initiation request, identifying, in response to the backup storage initiation request, an initial grouping amount for a plurality of application types, generating a plurality of backup storage deduplication pools based on the initial grouping amount, generating a buffer pool, and generating a plurality of deduplication pool metadata mappings based on the plurality of backup storage deduplication pools, wherein a backup storage deduplication pool of the plurality of backup storage deduplication pools comprises a storage device, and wherein the buffer pool comprises a plurality of storage devices.

Abstract: A method for managing storage devices in a backup storage system includes obtaining, by a backup agent, a backup storage initiation request, identifying, in response to the backup storage initiation request, an initial grouping amount for a plurality of application types, generating a plurality of backup storage deduplication pools based on the initial grouping amount, generating a buffer pool, and generating a plurality of deduplication pool metadata mappings based on the plurality of backup storage deduplication pools, wherein a backup storage deduplication pool of the plurality of backup storage deduplication pools comprises a storage device, and wherein the buffer pool comprises a plurality of storage devices.