Overview
The Data Protection Violations page serves as your central dashboard for monitoring backup compliance issues. Use this interface to distinguish between ongoing risks and historical trends.
Violation Tabs
To maintain an organized workspace, the dashboard is divided into two primary views:
Active Violations: Dedicated to current, ongoing issues that require immediate administrative attention. At the top of the dashboard, a summary panel provides a high-level snapshot of your environment's health.
Active Violations represents the aggregate count of all unresolved backup compliance issues across your managed accounts. This grand total is derived from two specific sub-categories of SLA violations:
Backup Success Rate
Recovery Point Objective
Consecutive Backup Failures
Resolved Violations: A historical log of past alerts. This tab gives details of archived and resolved violations from the active queue, allowing you to focus on current problems without losing audit data.
Note:
1. You can bulk-archive violations by disabling the parent rule. This clears all active alerts instantly, making it easier to test functionality and fine-tune thresholds for your customers.
2. When clicking the Active Violations count for a specific rule and customer in the details modal, the redirected Active Violations page may display a different number of events than expected. Please refer to the data shown in the details modal for the most accurate information.
Events Table Detailed View
The following table defines the detailed event fields for investigating Data Protection Violations:
Fields | Description |
Account Name | This indicates the specific customer account where the backup violation occurred. |
Product | This specifies the main product category that the affected workload belongs to. The options shown in the dashboard are-
|
Rule Name | This is the name assigned to the alert rule when it was created. |
Rule Type | This defines the category of the violation based on the SLA being monitored. The types include-
|
Workload | Name of the workloads. |
Resource | This points to the exact entity or item experiencing the issue within the workload. Resources are defined based on the workload type: for Enterprise Workloads, they represent Backup Sets; for User-based workloads (such as Gmail, Google Drive, OneDrive, and Exchange Online), they are counted by unique user emails; and for Endpoints, they are identified by the combination of user emails and devices. |
Threshold
| This is the configured limit set by the administrator within the rule settings. The system triggers a violation event when this limit is exceeded. For instance, a Recovery Point Objective threshold might be set to "15 Days". |
Observed (Value) | This represents the actual recorded metric that caused the violation. It shows exactly how far out of compliance the resource is. For example, if a Recovery Point Objective threshold is 15 days, the observed value might show "15 days 3 hours 20 mins". |
Generated
| This timestamp shows the exact date and time the system created the violation alert. For example, "Mar 11, 2026 12:34:13" |
View Details
Click View Details on any violation row to open a summary modal for that violation. The modal displays the rule type and workload in the header, and shows rule-specific metrics. Fields differ by rule type.
1. Common Fields (Identical Across Views)
These fields appear across all views and carry the same core meaning regardless of the specific rule type:
Section | Field Name | Description |
Rule Details | Rule | Identifier/link for the monitoring rule definition |
Customer Details | Customer / Account Name | The tenant or organization associated with the event |
| Service Plan | The active subscription level of the customer |
| Product | The platform module or product line monitored |
| Go to Tenant Console | External link to navigate directly to the customer portal |
Event Summary | State | Current operational status of the alert/event |
| Generated On | Timestamp when the violation alert was first triggered |
| Last Sync | Timestamp of the most recent data sync |
| Workload | The underlying platform or environment type |
2. Dynamic & Rule-Specific Fields
These fields change depending on the Rule Type being evaluated:
Section | Field Name | Rule Type Applicable | Description |
Rule Details | Rule Type | All | Identifies the metric condition being measured |
| Threshold | All | The standard boundary that triggers a violation |
Event Summary | Archived Date / Resolution Date | All | Timestamp when resolved/archived (NA/N.A. if active) |
| Resources Observed | Aggregate Metrics | Total count of individual resources evaluated under the rule |
| Resources in Violation | Aggregate Metrics | Number of resources failing the rule threshold |
| Resource in Violation | Single Resource | Specific VM/resource failing the rule |
| Total Jobs | Aggregate Metrics | Total backup jobs evaluated during the window |
| Total Failed Jobs | Aggregate Metrics | Number of backup execution failures |
| Total Jobs Attempted | Failure Count | Number of backup executions attempted on the specific resource |
| Observed Value | Success Rate | The actual recorded performance percentage |
| Last Successful Backup Time | RPO / Failure Count | Timestamp of the last successful backup point |
Violation Trend | Bar Chart (Success Rate) | Success Rate | Shows percentage levels against target line over time |
| Timeline Nodes | RPO / Incident-based | Shows discrete dates of historical violations |
Filtering Violations
To manage large datasets and isolate specific risks, click the Filter Icon on the right side of the screen. You can refine the list by:
Time Period: View data from the last 24 hours, 48 hours, 7 days, or 30 days.
Rule Type: Isolate issues by Recovery Point Objective, Backup Success Rate, or Consecutive Backup Failures.
Product & Workloads: Filter by major product category and then use the dropdown to select specific workloads.
Once you have selected your criteria, click Apply to update the table. Use Reset to quickly clear all filters and return to the full list.