Data Removed Device alert

Topic

This article explains the possible causes behind a deletion alert. The alert will typically say "You are receiving this alert because more than 25 GB of data has been removed from the device in a 24 hour period." The amount of data varies depending on what is set in the Device Alerts for the device.

Environment

• Datto SIRIS
• Datto ALTO
• Datto NAS

Cause

Here are some potential causes for this alert:

• The retention process deleted some large recovery points.
• The retention process resumed after being blocked by active recovery points, which may result in the sudden removal of many points at once.
• Points were manually removed from the device's web interface.

If a large deletion is unexpected or concerning, remember to examine the agent's retention settings and current recovery points to confirm whether the removal reflects current retention settings, and adjust them if necessary.

If the removal does not reflect current retention settings, it may have been done manually. Datto Technical Support is able to examine access logs for a device if an unauthorized manual removal has taken place.

For any further questions, don't hesitate to contact Datto technical support.