Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section V. Configuring backups
  4. Creating backup policies
  5. Policy Attributes tab
  6. Collect true image restore information (policy attribute) with and without move detection
  7. Example of true image restores
Veritas NetBackup™ Administrator's Guide, Volume I

Example of true image restores

The following table lists the files that were backed up in the /home/abc/doc/ directory of a UNIX client during a series of backups between 12/01/2015 and 12/04/2015. Collect true image restore information was enabled for the policy that performed the backups.

Table: Sample backups taken before a true image restore

Day

Type of backup

Files that are backed up in /home/abc/doc

12/01/2015

Full

file1  file2  dirA/fileA  dirB/fileB  file3

12/02/2015

Incremental

file1  file2  dirA/fileA  ----------  -----

12/03/2015

Incremental

file1  file2  dirA/fileA  ----------  -----

12/04/2015

User backup

file1  file2  dirA/fileA  ----------  -----  dirC/fileC  file4

12/04/2015

Incremental

file1  file2  ----------  ----------  -----  ----------  file4

Note:

Dashes ( ------ ) indicate that the file was deleted before this backup.

A restore of the 12/04/2015 version of the /home/abc/doc/ directory produces following results:

After a regular restore

The restored directory contains all files and directories that ever existed in /home/abc/doc/ from 12/01/2015 (last full backup) through 12/04/2015:

file1
file2
dirA/fileA
dirB/fileB
file3
dirC/fileC
file4

After a true image restore

The restored directory contains only the files and directories that existed at the time of the incremental backup:

file1
file2
file4

NetBackup does not restore any of the files that were deleted before the 12/04/2015 incremental backup.

The restored directory does not include the subdirectories dirA and dirC, even though they were backed up on 12/04/2015 with a user backup.

NetBackup did not restore these directories because they did not exist at the time of the incremental backup. The incremental backup was the reference for the true image restore.

Consider the following points to use either Collect true image restore or Collect true image restore with move detection:

  • NetBackup collects additional information for the incremental backups that collect true image restore information. Policies that use move detection require even more space.

  • Incremental backups are slower for a policy in which true image restore information is collected.

  • Configure the period of time that NetBackup retains the true image restore information. Set the Keep true image restoration (TIR) information property in the Clean-up properties dialog box.

    See Clean-up properties.

  • Only directories can be listed and selected. In true image restore mode, the client interface does not display individual files. Refer to the online Help in the Backup, Archive, and Restore client interface for more information on true image restores.

  • A true image restore preserves the files that are currently in the directory but were not present when the backup was completed. If you created a file file5 after an incremental backup on 12/04/2015 but before a restore, the contents of the restored directory would be as follows:

    file1
    file2
    file4
    file5

Feedback

Was this page helpful?
Previous

Collect true image restore information (policy attribute) with and without move detection

Next

Allow multiple data streams (policy attribute)

Feedback

Was this page helpful?