Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section XVI. System Administration
  4. Working with Log Files
  5. Data collector log file naming conventions
  6. Log file naming convention by collected system

Log file naming convention by collected system

The log file names will have one of the following prefixes substituted for the <policyID>:

  • #EVENT_<policyID>

  • #META_<policyID>

  • #<policyID>

Example: scheduled\legato.nw\#META_D922ACBCCFFA2933A301A530A0E011E4

Note:

Some collectors may have both a #META_and an #EVENT_log file.

Table: Log file locations for IT Analytics products

IT Analytics Product

Collected System

Where to find the logs (Linux syntax)

Backup Manager

Commvault Simpana

scheduled/commvault.simpana/#<policyID>
validation/commvault.simpana/#<policyID>

EMC Avamar

scheduled/emc.avamar/#<policyID>
validation/emc.avamar/#<policyID>
 

EMC Data Domain Backup

scheduled/emc.datadomain/#<policyID>
validation/emc.datadomain/#<policyID>
 

EMC NetWorker

scheduled/legato.nw/#<policyID>
validation/legato.nw/#<policyID>
 

HP Data Protector

scheduled/hp.dp/#<policyID>
validation/hp.dp/#<policyID>
 

IBM Spectrum Protect (TSM)

scheduled/ibm.tsm/#<policyID>
validation/ibm.tsm/#<policyID>
 

Oracle Recovery Manager (RMAN)

scheduled/oracle.rman/#<policyID>
validation/oracle.rman/#<policyID>

Note:

In addition to the hostname#<productId>/ directories, RMAN also creates directories for each INSTANCE.SCHEMA from which it collects.

 

Veeam Backup & Replication

scheduled/veeam.backupandreplication
/#<policyID>
validation/veeam.backupandreplication
/#<policyID>
 

Veritas Backup Exec

scheduled/veritas.bue/#<policyID>
validation/veritas.bue/#<policyID>
 

Veritas NetBackup

scheduled/veritas.netbackup/#<policyID>
validation/veritas.netbackup/#<policyID>

Capacity Manager

Dell Compellent

scheduled/dell.compellent/#<policyID>
validation/dell.compellent/#<policyID>
 

EMC Data Domain Storage

scheduled/emc.datadomain/#<policyID>
validation/emc.datadomain/#<policyID>
 

EMC Isilon

scheduled/emc.isilon/#<policyID>
validation/emc.isilon/#<policyID>
 

EMC Symmetrix

scheduled/emc.symmetrix/#<policyID>
validation/emc.symmetrix/#<policyID>
 

EMC VNX (Celerra)

scheduled/emc.celerra/#<policyID>
validation/emc.celerra/#<policyID>
 

EMC VNX (CLARiiON)

scheduled/emc.clariion/#<policyID>
validation/emc.clariion/#<policyID>
 

EMC VPLEX

scheduled/emc.vplex/#<policyID>
validation/emc.vplex/#<policyID>
 

EMC XtremIO

scheduled/emc.xtremio/#<policyID>
validation/emc.xtremio/#<policyID>
 

HP 3PAR

scheduled/hp.3par/#<policyID>
validation/hp.3par/#<policyID>
 

HP EVA

scheduled/hp.eva/#<policyID>
validation/hp.eva/#<policyID>
 

Hitachi Block

scheduled/hds.hds/#<policyID>
validation/hds.hds/#<policyID>
 

Hitachi HCP

scheduled/hds.hcp/#<policyID>
validation/hds.hcp/#<policyID>
 

Hitachi NAS

scheduled/hitachi.hnas/#<policyID>
validation/hitachi.hnas/#<policyID>
 

IBM Enterprise

scheduled/ibm.ent/#<policyID>
validation/ibm.ent/#<policyID>
 

IBM SVC

scheduled/ibm.svc/#<policyID>
validation/ibm.svc/#<policyID>
 

IBM XIV

scheduled/ibm.xiv/#<policyID>
validation/ibm.xiv/#<policyID>
 

NetApp 7-Mode

scheduled/netapp.netapp/#<policyID>
validation/netapp.netapp/#<policyID>
 

NetApp Cluster

scheduled/netapp.netapp/#<policyID>
validation/netapp.netapp/#<policyID>
 

NetApp E-Series

scheduled/netapp.netapp/#<policyID>
validation/netapp.netapp/#<policyID>
 

Pure Storage FlashArray

scheduled/purestorage.flasharray/#<policyID>
validation/purestorage.flasharray/#<policyID>

Cloud

Amazon Web Services

scheduled/amazon.webservices/#<policyID>
validation/amazon.webservices/#<policyID>
 

Microsoft Azure

scheduled/microsoft.azure/#<policyID>
validation/microsoft.azure/#<policyID>
 

OpenStack Ceilometer

scheduled/openstack.ceilometer/#<policyID>
validation/openstack.ceilometer/#<policyID>
 

OpenStack Swift

scheduled/openstack.swift/#<policyID>
validation/openstack.swift/#<policyID>

Fabric Manager

Brocade

scheduled/brocade.brocadeswitch/#<policyID>
validation/brocade.brocadeswitch/#<policyID>
 

Brocade Zone Alias

scheduled/brocade.brocade/#<policyID>
validation/brocade.brocade/#<policyID>
 

Cisco

scheduled/cisco.ciscoswitch/#<policyID>
validation/cisco.ciscoswitch/#<policyID>
 

Cisco Zone Alias

scheduled/cisco.cisco/#<policyID>
validation/cisco.cisco/#<policyID>

File Analytics

Hosts

scheduled/generic.fa/#<policyID>
validation/generic.fa/#<policyID>

Host Collection

Hosts

scheduled/generic.host/#<policyID>
validation/generic.host/#<policyID>

Virtualization Manager

IBM VIO

scheduled/cisco.cisco/#<policyID>
validation/cisco.cisco/#<policyID>
 

VMware

scheduled/vmware.esx/
validation/vmware.esx/

Feedback

Was this page helpful?
Previous

Test Connection Log

Next

General data collector log files

Feedback

Was this page helpful?