Backup Resulted in Success, Warning, or Failure

Sent when a backup policy execution finishes with a success, warning or failure result.

General Information

Event ID: vdc.workload_v0.tenant_v0.backup.policy_v0.execution_v0.status_v0

Event message details: Sent with data.status.status set to SUCCESS, WARNING or FAILED.

Severity: Varies depending on data.status.status.

General Information
data.status.status	Severity
SUCCESS	Info
WARNING	Medium
FAILED	Critical

Workloads: Veeam Data Cloud for Microsoft 365, Veeam Data Cloud for Microsoft Azure

Parameters

The parameter set is the same for every source that sends this event.

Parameters
Parameter Name	Description	Example
specversion	Event schema version.	ev20260814
source	System that sent the event. Possible values: `CONTROLPLANE`, `M365`, `AZURE`.	M365
timestamp	Time when the event happened, in RFC3339Nano format and the UTC time zone.	2026-08-04T02:14:37Z
type	Event ID.	vdc.workload_v0.tenant_v0.backup.policy_v0.execution_v0.status_v0
severity	Event severity. Possible values: `INFO`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`.	INFO
visibility	Intended visibility scope of the event. Only events with the `CUSTOMER_ACCESSIBLE` value are forwarded to SIEM platforms, so a forwarded event always carries this value.	CUSTOMER_ACCESSIBLE
category	Event category. Possible values: `BACKUP`, `RESTORE`, `LOGIN`, `USER_MANAGEMENT`, `TENANT_MANAGEMENT`, `ORGANIZATION_MANAGEMENT`, `SUBSCRIPTION_MANAGEMENT`, `SECURITY_ALERT`, `INTERNAL`.	BACKUP
actor.kind	Actor type that triggered the event. Possible values: `user`, `system`, `service_account`.	system
organizationReference.workloadTenantId	Workload tenant ID.	tenant_12345
orgId	ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant.	org_12345
data.workload.type	Workload type. Possible values: `M365`, `AZURE`.	M365
data.tenant.id	Tenant ID.	tenant_12345
data.policy.id	Backup policy ID.	policy_12345
data.policy.name	Human-readable name of the backup policy.	Daily Logs Backup
data.policy.type	Type of data or execution covered by this policy.	logs
data.policy.protectionType	Protection category covered by this policy. Possible values: `FLEX`.	FLEX
data.execution.id	Backup execution ID.	execution_12345
data.execution.isFirstBackup	Whether this is the first backup policy execution that created a restore point. Set to `true` only if the execution ends with the `SUCCESS` or `WARNING` status and no earlier execution of the policy created a restore point. Set to `false` for every other execution, including failed ones. Possible values: `true`, `false`.	false
data.execution.isRetryOfExecutionId	Original execution ID. Empty if the policy execution is not a retry.	execution_67890
data.status.startTime	Date and time when the backup policy execution started.	2026-08-04T02:00:00Z
data.status.endTime	Date and time when the backup policy execution completed.	2026-08-04T02:14:37Z
data.status.status	Current status of the backup policy execution. Possible values: QUEUED, STARTED, SUCCESS, WARNING, FAILED, ABORTED.	SUCCESS

Event Example

The following example shows the event sent for a backup policy execution that finished with the SUCCESS result.

{

"specversion": "ev20260814",

"source": "M365",

"timestamp": "2026-08-04T02:14:37Z",

"type": "vdc.workload_v0.tenant_v0.backup.policy_v0.execution_v0.status_v0",

"severity": "INFO",

"visibility": "CUSTOMER_ACCESSIBLE",

"category": "BACKUP",

"actor": {

"kind": "system"

"organizationReference": {

"workloadTenantId": "tenant_12345"

"orgId": "org_12345",

"data": {

"workload": {

"type": "M365"

"tenant": {

"id": "tenant_12345"

"policy": {

"id": "policy_12345",

"name": "Daily Logs Backup",

"type": "logs",

"protectionType": "FLEX"

"execution": {

"id": "execution_12345",

"isFirstBackup": false

"status": {

"startTime": "2026-08-04T02:00:00Z",

"endTime": "2026-08-04T02:14:37Z",

"status": "SUCCESS"

}