Event logs for VSS

Question

Hi, just wanted to ask any logs we can check regarding VSS tasks. All our snapshots have been deleted at 8PM due to high IO load but it was scheduled to run at 6AM. the drive has enough space during that time and I dont know what triggered for it to be deleted. Only robocopy script is running during that time but VSS is not running.

Answer 1

Hi,

Hope you're doing well.

To troubleshoot the unexpected deletion of VSS snapshots, you can check several logs and event sources on your Windows system:

1. Look for events related to VSS and any related errors or warnings. You can find these events in the "Windows Logs" -> "System" section of Event Viewer.
2. You can also use the "vssadmin" command-line tool to query the status of VSS and view recent events. Open Command Prompt as an administrator and run "Vssadmin list writers".
3. If you're using any backup or snapshot management software, check its logs for any relevant information about the deletion of snapshots.
4. verify the scheduled tasks on your system, including any automated scripts or processes that run around the time when the snapshots were deleted. Ensure that there are no tasks scheduled to delete VSS snapshots or interfere with VSS operations.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.