Restore Point Marked as Infected
Sent when a user marks a restore point as infected. For more information, see Managing Malware Status.
General Information
Event ID: 42220
Event message details: Restore point has been marked as infected by <User>
Severity: Warning
Parameters
Parameter Name | Description | Example |
|---|---|---|
PointID | Restore point ID. | PointID="2eec1a91-7202-49a9-b60b-1436793c2502" |
UserName | Name of the user who performed an operation. | UserName="TECH\user1" |
ObjectName | Object name. | ObjectName="VM01" |
RestorePointTimeStamp | Date and time when a restore point has been created. | RestorePointTimeStamp="10/24/2023 19:02:34" |
Version | Event version (service parameter). | Version="1" |
Description | Event message details. | Description="Restore point has been marked as infected by TECH\user1." |
Syslog Message Example
<14>1 2023-10-20T14:53:50.811203+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42220 param1="0" PointID="2eec1a91-7202-49a9-b60b-1436793c2502" param3="0" param4="0" param5="0" UserName="TECH\user1" ObjectName="VM01" RestorePointTimeStamp="10/24/2023 19:02:34" Version="1" Description="Restore point has been marked as infected by TECH\user1."] |