VSS shadow storage
Shadow-copy storage allocation and how close it is to its cap.
Topic id: vss_shadowstorage.
Conditions
A condition is a state that holds for a while. The agent opens it when the host enters it, keeps it open while it lasts, and closes it when the host comes back out, so one episode answers for the whole stretch instead of one alert per sample.
| Condition | Severity | How an episode ends |
|---|---|---|
shadow storage near cap (vss_shadowstorage_near_cap) | Notice | It closes when the measurement falls back past its recovery point. |
shadow copies failing for space (vss_snapshots_failing_for_space) | Notice to Error | It closes when the measurement falls back past its recovery point. |
Example
Inventory (every 6 hours)
1 shadow store.
sparklogs.data.vss_shadowstorage.volume: volume:3b1a9c1e-0000-0000-0000-100000000001
sparklogs.data.vss_shadowstorage.shadowstorage_at_cap: false
sparklogs.data.vss_shadowstorage.snap_fail_count_24h: 0
sparklogs.data.vss_shadowstorage.snap_fail_count_7d: 0
sparklogs.data.vss_shadowstorage.shadowstorage_used_pct: 17.58
SparkLogs: CONTEXT, Info, vss_shadowstorage: INVENTORY: 1 shadow store.
Selected conditions
vss_shadowstorage_near_cap
Shadow storage is near capacity.
Impact: Restore points may start being deleted if usage continues to rise.
Example
started; volume "C" shadow storage used 92.19% (threshold 90%)
sparklogs.instance: volume:3b1a9c1e-0000-0000-0000-100000000001
sparklogs.data.vss_shadowstorage.volume: volume:3b1a9c1e-0000-0000-0000-100000000001
sparklogs.data.vss_shadowstorage.shadowstorage_used_pct: 92.19
sparklogs.data.vss_shadowstorage.vss_shadowstorage_age_h: 0.0
SparkLogs: vss_shadowstorage_near_cap, Notice, vss_shadowstorage: vss_shadowstorage_near_cap: NOTABLE: started; volume "C" shadow storage used 92.19% (threshold 90%)
| Case | Severity | Ticket class |
|---|---|---|
onset | Trace to Fatal | backup |
held | Trace to Fatal | backup |
recovered | Trace to Fatal | backup |
vss_snapshots_failing_for_space
Shadow copies are failing for want of space, so restore points are being lost.
Impact: Older restore points are being trimmed; backups themselves may still succeed, but restore history depth shrinks.
Example
started; volume "C" snapshot failures in a day 4 (threshold 3)
sparklogs.instance: volume:3b1a9c1e-0000-0000-0000-100000000001
sparklogs.data.vss_shadowstorage.volume: volume:3b1a9c1e-0000-0000-0000-100000000001
sparklogs.data.vss_shadowstorage.snap_fail_count_24h: 4
sparklogs.data.vss_shadowstorage.snap_fail_count_7d: 4
sparklogs.data.vss_shadowstorage.vss_shadowstorage_age_h: 0.0
SparkLogs: vss_snapshots_failing_for_space, Error, vss_shadowstorage: vss_snapshots_failing_for_space: NOTABLE: started; volume "C" snapshot failures in a day 4 (threshold 3)
| Case | Severity | Ticket class |
|---|---|---|
onset | Trace to Fatal | backup |
held | Trace to Fatal | backup |
recovered | Trace to Fatal | backup |