94 docs tagged with "airgap"

Review the copy log, job log search, and vault activity.

Advanced tuning for S3 connection management and DNS resolution.

Each time the copy engine records a copied or skipped object.

This is a host-wide measure of how long each individual read I/O is taking.

This is a host-wide measure of how long each individual write I/O is taking.

During an active copy job, Egress primarily reflects:

This is host-wide CPU, not just the copy engine process.

During an active copy job, Ingress primarily reflects:

Compare this against Host CPU to isolate how much of the host's compute budget the copy engine is consuming vs other processes.

The denominator is -Xmx (the JVM maximum heap).

This counts all active TCP connections on the host, including S3 connections, ClickHouse connections, console heartbeat connections.

Orphaned sockets arise when a process closes a socket while data is still in-flight or when the remote end has not acknowledged a FIN.

TIME_WAIT sockets are a normal part of TCP connection teardown.

Install, monitor, and collect logs from copy agents.

This tab shows all registered copy engine agents, their current status, and the tools for managing their availability.

The Agent Dashboard provides a consolidated view of health and network metrics across all registered copy engine agents.

The Agent Installation tab guides you through deploying a new copy engine agent onto a target host.

Live Agents shows all currently registered copy engine agents in real time, with their connection status, current workload, and health indicators.

Agents periodically zip their on-disk log files and push the archive to the console so you can download and inspect them from the GUI without needing.

Review per-agent CPU, memory, network, disk, and TCP metrics.

The Network tab shows real-time operating system level TCP socket state counts for each registered copy engine agent.

Documentation for AirGap for ObjectScale, covering setup, vault operations, monitoring, system health, alarms, and system settings.

The AirGap for ObjectScale MCP Server exposes the console's API as tools that AI assistants — including Claude, Cursor.

The Alarm System monitors your environment continuously using rule-driven logic evaluated on a 60-second background tick.

The API Docs page embeds the live Swagger user interface for the console's backend REST API.

This tab handles creating and restoring a full backup of the application's persistent data, including settings, the application database.

The ClickHouse Health page (ClickHouse Database Health) provides deep diagnostics for the analytics database that stores all audit events.

Supported ObjectScale versions and hypervisors for AirGap for ObjectScale.

The Copy Job Queue page provides a real-time view of all copy engine job activity.

Review copy job history and manage the active queue.

This tab provides a complete view of copy activity: the full historical record of every job that has run.

The Copy Job Active Queue Management sub-tab shows all copy jobs currently in the dispatch queue — pending dispatch, actively running.

The Live View & History tab shows all copy jobs — full syncs, incremental syncs, and batch sync — currently running or in history.

The Copy Log page shows the per-object detail log for a single copy job (open it with View Detailed Copy Log in the job's Job #N Details flyout).

Shows protection coverage across all vault copy policies, grouped by device and then by namespace or protection group.

This tab shows and edits the connection parameters for the two databases the system uses — ClickHouse for analytics and PostgreSQL for operational.

This page lists the host requirements for the console appliance, the vault agent, and the copy agent, and every network flow and port your firewall team must permit.

Prerequisites, sizing, network requirements, and installation steps for the AirGap for ObjectScale console, copy agents, and vault agent.

This tab provides Logging settings, on-demand state snapshots, agent fleet snapshots, and JVM profile management for remote copy engine agents.

Configure SMTP email notifications for alarm events.

This tab (labeled Full Data Sync Management in the Cyber Vault side menu) is the central dispatch + browse surface for vault copy job policies.

The Vault Jobs sub-tab is the dispatch + browse surface for every vault copy policy.

The Grant Cyber Vault Service Accounts Data Access ACL Policy to source buckets mode applies or revokes read-access bucket policies on source buckets.

This tab provides a per-group summary of RPO (Recovery Point Objective) compliance across all protection groups.

The Incremental Sync tab is the operational control center for all incremental copy activity.

The Ingest Offsets page is a diagnostic view showing the byte-level read position for every audit log file being tracked by the ingest pipeline.

The Job Log Search tab lets you search across the copy-log records from all copy jobs at once — not just a single job.

The Job Trends page shows throughput and performance charts for a single copy job.

The Jobs page (System Jobs in the top menu) shows the history and current state of the system jobs — audit ingest runs, ObjectScale inventory scans.

This tab shows the product the console runs as, the capacity your licenses allow for each node tier against what the vault devices use.

The Live Jobs tab shows all copy engine jobs currently in flight — running, auto-paused due to a 503 throttle holdoff.

You have been running Airgap (the previous copy product) against an ObjectScale source bucket.

Track copy job queues, jobs, ingest offsets, and system status.

Manage agents, copy jobs, sync groups, protection groups, and performance reporting.

Get an overview of agent fleet, copy jobs, and data sync management.

Review group health, job trends, sync dashboards, and TPS limits.

The Phone Home tab controls opt-in telemetry sent to Superna and shows the Appliance ID required for license requests.

Configure protection groups, service accounts, and incremental or full data sync.

The Protection Groups tab defines the named collections of buckets that share a copy policy, schedule, and vault target.

Step 4 creates the corresponding namespaces, service accounts.

The Quantum Trust Protocol Audit Log tab (panel title Quantum Trust Protocol — Message History) shows the full ML-KEM-1024 encrypted message history.

The Queue tab shows only pending jobs — jobs that are assigned to an agent and waiting to be picked up.

Supported environments and known issues for the first release of AirGap for ObjectScale.

This tab defines reusable schedule policies — named time-window configurations that control when vault copy jobs are allowed to run.

This tab provides an audit trail of all API activity on the system and manages bearer tokens for programmatic access.

Source accounts are the S3 credentials used by copy jobs to read from source ObjectScale devices.

Target accounts are the S3 credentials used by copy jobs to write to vault-side ObjectScale devices.

Deploy the appliance and configure the database, licensing, security, and storage.

The Software Update tab lets an administrator upgrade the console — replace the running application container without touching the host directly.

This tab manages protection groups — named collections of buckets that share a target vault device, a schedule policy.

The Source Data Protection Policy Config step (Step 5) creates and manages per-bucket vault protection policies.

This tab configures every storage integration that the console collects audit events from or copies data to.

The Support Log Parsing tab lets administrators analyze AirGap for ObjectScale backup archives using the support analyzer.

Review the vault sync dashboard, device management, and audit log.

Configure sync groups, policies, and vault namespace and bucket provisioning.

The System Monitor page (found under System Monitor in the navigation bar) provides real-time visibility into JVM health.

The System Performance tab provides a fleet-level view of copy throughput and agent activity across all bucket groups and agents.

Configure advanced settings, email alerts, backup, support, and API access.

This tab shows which entity — the console or a vault agent — currently owns service account operations for each vault ObjectScale storage device.

The TPS Monitor gives real-time and historical visibility into how the global TPS rate limiter is distributing S3 API call quota across all active.

The TPS Rate Limiting settings page configures the global throughput governor for all copy agents.

Symptoms, causes, and fixes for licensing, database, copy jobs, incremental sync, audit ingest, vault agents, and alarms in AirGap for ObjectScale.

The Vault Activity tab is a chronological log of every vault network open and close that a vault agent has executed.

The Vault Agents section manages the fleet of vault agent processes running inside your vault network.

Install, monitor, and review logs for vault agents.

The Dashboard shows a status card for every vault agent registered with this console.

The Install tab walks you through the two steps needed to deploy a vault agent on a remote vault host: generate a vault-scoped authentication key.

The Logs tab manages vault agent log delivery and verbosity.

The full help for the message history is on the Quantum Trust Protocol Audit Log tab.

This tab shows every bucket that has at least one changelist window that has not yet been successfully synced to the vault.

At the top of the Vault Data Sync Dashboard is the Operational Mode panel, which shows whether the system is in Preparation Mode or Vault Mode Active.

The Vault Device Management tab provides visibility into and control over physical devices assigned to each vault agent's Quantum Trust Domain (QTD).

Monitor vault activity, vault agents, and data sync.

What's new in the first release of AirGap for ObjectScale, version 3.0.0.