snapmirror destination deleted snapshots

[ORCUN_USTURALI]

Hi to all

we have a snapmirror relation between 2 system, and snapmirror destination has a policy to keep 52 weeks of snapshots .Most of the volumes have that much snapshot but 2 volumes only have only 4 weeks of snapshots retained.

same policy applied to all volumes, we didnt got why this happened.We noticed that those 2 volumes have been moved between 2 aggregates .Can it be the reason? .I dont think so

so we thougt that the snapshots was manually deleted, but cannot find a log? (where can i find a log about snapshot deletion ?).

also we searched through the active IQ residing on the customer side, cannot find a log.

lasty we looked the spi logs of the destination filer, but cannot find a meaningful log

any ideas?any suggesstions to look after

regards

[ORCUN_USTURALI]

hi

during the search i found this Kb ,

https://kb.netapp.com/onprem/ontap/dp/SnapMirror/How_to_investigate_missing_or_deleted_snapshots_by_leveraging_the_ONTAP_audit_logs

but couldnt find the reason or why deleted the snapshost yet

audit log show -input *snapshot* 

and

• You can also download the previous iterations of 'audit.log' from /etc/log/mlog by accessing the SPI.

[Sanaman]

Snaps on SNapmirror destination is managed by snapshot policy.

snapmirror show <destination_cluster>:<destination_path> -fields policy

Then look at the policy

Something like this:

(keep 14 snaps)

Keep: 14
Total Keep: 14

[ORCUN_USTURALI]

Thansk Sanaman

But its not the case, we have same policy for lots of volumes, only 2 of them lost their snapshots,the remainign volume has the snapshots as mentioned in the policy settings

[Ashun]

hi

Whether it is because these two volumes only retain four-week snapshots may be that the space occupied by snapshots is relatively large, exceeding the snapshot reserved space, triggering the snapshot auto-deletion