You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/automation/automation-managing-data.md
+24-18Lines changed: 24 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,57 +3,65 @@ title: Managing Azure Automation data
3
3
description: This article contains multiple topics for managing an Azure Automation environment. Currently includes Data Retention and Backing up Azure Automation Disaster Recovery in Azure Automation.
4
4
services: automation
5
5
ms.subservice: shared-capabilities
6
-
ms.date: 03/16/2018
6
+
ms.date: 03/23/2020
7
7
ms.topic: conceptual
8
8
---
9
9
# Managing Azure Automation data
10
+
10
11
This article contains multiple topics for managing an Azure Automation environment.
11
12
12
13
## Data retention
13
-
When you delete a resource in Azure Automation, it is retained for 90 days for auditing purposes before being removed permanently. You can’t see or use the resource during this time. This policy also applies to resources that belong to an automation account that is deleted.
14
14
15
-
Azure Automation automatically deletes and permanently removes jobs older than 90 days.
15
+
When you delete a resource in Azure Automation, it is retained for 30 days for auditing purposes before being removed permanently. You can't see or use the resource during this time. This policy also applies to resources that belong to an automation account that is deleted.
16
+
17
+
Azure Automation automatically deletes and permanently removes jobs older than 30 days.
16
18
17
19
The following table summarizes the retention policy for different resources.
18
20
19
21
| Data | Policy |
20
22
|:--- |:--- |
21
-
| Accounts |Permanently removed 90 days after the account is deleted by a user. |
22
-
| Assets |Permanently removed 90 days after the asset is deleted by a user, or 90 days after the account that holds the asset is deleted by a user. |
23
-
| Modules |Permanently removed 90 days after the module is deleted by a user, or 90 days after the account that holds the module is deleted by a user. |
24
-
| Runbooks |Permanently removed 90 days after the resource is deleted by a user, or 90 days after the account that holds the resource is deleted by a user. |
25
-
| Jobs |Deleted and permanently removed 90 days after last being modified. This could be after the job completes, is stopped, or is suspended. |
26
-
| Node Configurations/MOF Files |Old node configuration is permanently removed 90 days after a new node configuration is generated. |
27
-
| DSC Nodes |Permanently removed 90 days after the node is unregistered from Automation Account using Azure portal or the [Unregister-AzureRMAutomationDscNode](https://docs.microsoft.com/powershell/module/azurerm.automation/unregister-azurermautomationdscnode) cmdlet in Windows PowerShell. Nodes are also permanently removed 90 days after the account that holds the node is deleted by a user. |
23
+
| Accounts |Permanently removed 30 days after the account is deleted by a user. |
24
+
| Assets |Permanently removed 30 days after the asset is deleted by a user, or 30 days after the account that holds the asset is deleted by a user. |
25
+
| Modules |Permanently removed 30 days after the module is deleted by a user, or 30 days after the account that holds the module is deleted by a user. |
26
+
| Runbooks |Permanently removed 30 days after the resource is deleted by a user, or 30 days after the account that holds the resource is deleted by a user. |
27
+
| Jobs |Deleted and permanently removed 30 days after last being modified. This could be after the job completes, is stopped, or is suspended. |
28
+
| Node Configurations/MOF Files |Old node configuration is permanently removed 30 days after a new node configuration is generated. |
29
+
| DSC Nodes |Permanently removed 30 days after the node is unregistered from Automation Account using Azure portal or the [Unregister-AzureRMAutomationDscNode](https://docs.microsoft.com/powershell/module/azurerm.automation/unregister-azurermautomationdscnode) cmdlet in Windows PowerShell. Nodes are also permanently removed 30 days after the account that holds the node is deleted by a user. |
28
30
| Node Reports |Permanently removed 90 days after a new report is generated for that node |
29
31
30
32
The retention policy applies to all users and currently cannot be customized.
31
33
32
-
However, if you need to retain data for a longer period of time, you can forward runbook job logs to Azure Monitor logs. For further information, review [forward Azure Automation job data to Azure Monitor logs](automation-manage-send-joblogs-log-analytics.md).
34
+
However, if you need to retain data for a longer period of time, you can forward runbook job logs to Azure Monitor logs. For further information, review [forward Azure Automation job data to Azure Monitor logs](automation-manage-send-joblogs-log-analytics.md).
33
35
34
36
## Backing up Azure Automation
35
-
When you delete an automation account in Microsoft Azure, all objects in the account are deleted including runbooks, modules, configurations, settings, jobs, and assets. The objects cannot be recovered after the account is deleted. You can use the following information to backup the contents of your automation account before deleting it.
37
+
38
+
When you delete an automation account in Microsoft Azure, all objects in the account are deleted including runbooks, modules, configurations, settings, jobs, and assets. The objects cannot be recovered after the account is deleted. You can use the following information to backup the contents of your automation account before deleting it.
36
39
37
40
### Runbooks
38
-
You can export your runbooks to script files using either the Azure portal or the [Get-AzureAutomationRunbookDefinition](https://docs.microsoft.com/powershell/module/servicemanagement/azure/get-azureautomationrunbookdefinition) cmdlet in Windows PowerShell. These script files can be imported into another automation account as discussed in [Creating or Importing a Runbook](/previous-versions/azure/dn643637(v=azure.100)).
41
+
42
+
You can export your runbooks to script files using either the Azure portal or the [Get-AzureAutomationRunbookDefinition](https://docs.microsoft.com/powershell/module/servicemanagement/azure/get-azureautomationrunbookdefinition) cmdlet in Windows PowerShell. These script files can be imported into another automation account as discussed in [Creating or Importing a Runbook](/previous-versions/azure/dn643637(v=azure.100)).
39
43
40
44
### Integration modules
41
-
You cannot export integration modules from Azure Automation. You must ensure that they are available outside of the automation account.
45
+
46
+
You cannot export integration modules from Azure Automation. You must ensure that they are available outside of the automation account.
42
47
43
48
### Assets
49
+
44
50
You cannot export [assets](/previous-versions/azure/dn939988(v=azure.100)) from Azure Automation. Using the Azure portal, you must note the details of variables, credentials, certificates, connections, and schedules. You must then manually create any assets that are used by runbooks that you import into another automation.
45
51
46
52
You can use [Azure cmdlets](https://docs.microsoft.com/powershell/module/azurerm.automation#automation) to retrieve details of unencrypted assets and either save them for future reference or create equivalent assets in another automation account.
47
53
48
-
You cannot retrieve the value for encrypted variables or the password field of credentials using cmdlets. If you don't know these values, then you can retrieve them from a runbook using the [Get-AutomationVariable](/previous-versions/azure/dn940012(v=azure.100)) and [Get-AutomationPSCredential](/previous-versions/azure/dn940015(v=azure.100)) activities.
54
+
You cannot retrieve the value for encrypted variables or the password field of credentials using cmdlets. If you don't know these values, then you can retrieve them from a runbook using the [Get-AutomationVariable](/previous-versions/azure/dn940012(v=azure.100)) and [Get-AutomationPSCredential](/previous-versions/azure/dn940015(v=azure.100)) activities.
49
55
50
-
You cannot export certificates from Azure Automation. You must ensure that any certificates are available outside of Azure.
56
+
You cannot export certificates from Azure Automation. You must ensure that any certificates are available outside of Azure.
51
57
52
58
### DSC configurations
59
+
53
60
You can export your configurations to script files using either the Azure portal or the
54
61
[Export-AzureRmAutomationDscConfiguration](https://docs.microsoft.com/powershell/module/azurerm.automation/export-azurermautomationdscconfiguration) cmdlet in Windows PowerShell. These configurations can be imported and used in another automation account.
55
62
56
63
## Geo-replication in Azure Automation
64
+
57
65
Geo-replication, standard in Azure Automation accounts, backs up account data to a different geographical region for redundancy. You can choose a primary region when setting up your account, and then a secondary region is assigned to it automatically. The secondary data, copied from the primary region, is continuously updated in case of data loss.
58
66
59
67
The following table shows the available primary and secondary region pairings.
@@ -67,5 +75,3 @@ The following table shows the available primary and secondary region pairings.
67
75
| Japan East |Japan West |
68
76
69
77
In the unlikely event that a primary region data is lost, Microsoft attempts to recover it. If the primary data cannot be recovered, then geo-failover is performed and the affected customers will be notified about this through their subscription.
0 commit comments