Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section XVI. System Administration
  4. Appendix H. IT Analytics for NetBackup on appliances
  5. Configure IT Analytics for NetBackup deployment on Kubernetes

Configure IT Analytics for NetBackup deployment on Kubernetes

You can configure Data Collector on the primary server. Following are the steps for respective configurations.

Note:

From NetBackup version 10.3 Cloud Scale release, Data Collector on primary server is supported.

Configure IT Analyticsfor NetBackup deployment by configuring Data Collector on a primary server

The following steps to configure the IT Analytics Data Collector need to be performed as root user. Connect to the primary server pod and then switch to root user using sudo.

To configureIT Analytics for NetBackup deployment

  1. Create a DNS server entry in such a way that IP of the Portal must be resolvable to a single FQDN. IP of the IT Analytics Portal must resolve to:
    itanalyticsagent.<yourdomain>
    

    Note the following:

    • If the Portal URL is itanalyticsportal.<yourdomain>, then ensure to add the DNS entries for the following hostnames:

      itanalyticsagent.<yourdomain> 
      
    • If the \ URL is aptareportal.<yourdomain>, then ensure to add the DNS entries for the following hostnames:

      aptareagent.<yourdomain>
      
  2. Collect <your-collector-name>.key file for the new Data Collector by accessing the Portal link and creating a collector and copy it to the host machine from where Kubernetes cluster is accessed.

    For more information, see Data Collector Encryption section in IT Analytics User Guide.

  3. Copy the <your-collector-name>.key file to /mnt/nbdata/analyticscollector inside hte NBU Primary pod using the command kubectl cp <keyfile-name> <namespace>/<primary-pod-name>:/mnt/nbdata/analyticscollector.
  4. In case if the data-receiver is configured with self-signed certificate (https). User must add the certificate in the Data Collector.

    See Configure the Data Collector to trust the certificate.

  5. Execute the following command on the primary server pod:

    kubectl exec -it -n <namespace> <primaryServer-pod-name> -- bash

  6. Navigate to /usr/openv/analyticscollector/installer/ location and perform the following:
    • Open the responsefile.sample and add the following parameters:

      COLLECTOR_NAME=name_of_the_data_collector
      COLLECTOR_PASSCODE=passcode_for_the_data_collector
      DR_URL=data_receiver_URL
      COLLECTOR_KEY_PATH=path_to_the_key_file
      HTTP_PROXY_CONF=N
      HTTP_PROXY_ADDRESS=
      HTTP_PROXY_PORT=
      HTTPS_PROXY_ADDRESS=
      HTTPS_PROXY_PORT=
      PROXY_USERNAME=
      PROXY_PASSWORD=
      PROXY_EXCLUDE=
    • Run /usr/openv/analyticscollector/installer/dc_installer.sh -c /usr/openv/analyticscollector/installer/responsefile.sample command to configure Data Collector with IT Analytics portal.

  7. Validate Data Collector integration with IT Analytics by performing the following:
    • Navigate to /usr/openv/analyticscollector/mbs/bin/ location.

    • Run the following command:

      ./checkinstall.sh

      If Data Collector is configured with portal, it will display as SUCCESSFUL.

    Note:

    If there is a version mismatch of aptare.jar between Data Collector and Portal, execution of checkinstall.sh command will trigger an auto-update of the Data Collector.

  8. Check the Data Collector services status by running the following command and ensure that the following Data Collector services are up and running:

    /usr/openv/analyticscollector/mbs/bin/aptare_agent status

    Output of the above command:

    IT Analytics WatchDog is running (pid: 13312).
    IT Analytics MetaDataCollector is stopped.
    IT Analytics EventDataCollector is stopped.
    IT Analytics DataCollector process is running (pid: 13461).
    IT Analytics On-demand process is running (pid: 13463).
    IT Analytics Message Relay Server process is running (pid: 13471)
    

For more information about IT Analytics Data Collector policy, see IT Analytics User Guide.

Configuring IT Analytics for NetBackup deployment by configuring Data Collector on a separate host machine

IT Analytics can be configured to use with NetBackup primary server in this Kubernetes environment.IT Analyticscan be configured at the time of primary server deployment or user can update the primary server custom resource to configure IT Analytics.

To configure IT Analytics for NetBackup deployment

  1. Using the ssh-keygen command, generates public key and private key on IT Analytics Data Collector.

    IT Analytics Data Collector uses passwordless ssh login.

  2. Update the primary server custom resource, copy public key generated in previous steps to "itAnalyticsPublicKey" section.
    • Apply the primary server custom resource changes using kubectl apply -f environment.yaml -n <namespace>.

      On successfully deployment of primary server, describe the primary server custom resource using kubectl describe PrimaryServer <primary-server-name> -n <namespace>

    • In the Status section, verify IT Analytics Configured is set to true.

      For more information, refer to the NetBackup™ Web UI Administrator's Guide.

  3. Create and copy NetBackup API key from NetBackup web UI.

  4. On IT Analytics Portal:
    • Navigate to Admin > Collector Administration > Select respective Data Collector > Add policy > Veritas NetBackup > Add.

    • Add required options, specify the NetBackup API in the API Key field, and then click OK.

    • Select newly added primary server from NetBackup Primary Servers and provide nbitanalyticsadmin as Primary Server User ID.

    • Provide privateKey=<path-of-private-key>|password=<passphrase> as Primary Server Password and Repeat Password whereas <path-of-private-key> is the private key created using ssh-keygen in earlier steps and <passphrase> is the passphrase used while creating private key via ssh-keygen.

    • Provide appropriate data to Data Collector policy fields and select collection method as SSH or WMI protocol to NetBackup Primary Server.

Configuring the primary server with IT Analytics tools is supported only once from primary server custom resource.

For more information about IT Analytics Data Collector policy, see Add a Veritas NetBackup Data Collector policy section.

For more information about adding NetBackup Primary Servers within the Data Collector policy, see Add/Edit NetBackup Primary Servers within the Data Collector policy section in IT Analytics Data Collector Installation Guide for Backup Manager.

To change the already configured public key

  1. Execute the following command in the primary server pod:

    kubectl exec -it -n <namespace> <primaryServer-pod-name> -- /bin/bash

  2. Copy the new public keys in the /home/nbitanalyticsadmin/.ssh/authorized_keys and /mnt/nbdata/.ssh/nbitanalyticsadmin_keys files.
  3. Restart the sshd service using the systemctl restart sshd command.

Feedback

Was this page helpful?
Previous

Configure embedded IT Analytics Data collector for NetBackup deployment on appliances (including Flex appliances)

Next

Section XVII. Licensing

Feedback

Was this page helpful?