# US 2023/0067337 A1 · Performing conditional snapshot creation during continuous data protection age-out > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0067337 A1 - Document ID: US20230067337A1 - Status: Published application - Kind: A1 - Application number: 17/409,491 - Filed: 2021-08-23 - Published: 2023-03-02 - Earliest claimed: 2021-08-23 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Travis Janssen; Sangeetha Seshadri; Umesh Deshpande; Nicholas Linck - Web page: https://patentgrep.com/patent/US20230067337A1 ## CPC - G06F 11/1461: {Backup scheduling policy} - G06F 3/0619: {in relation to data integrity, e.g. data losses, bit errors} - G06F 3/065: {Replication mechanisms} - G06F 3/0659: {Command handling arrangements, e.g. command buffers, queues, command scheduling} - G06F 3/067: {Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]} - G06F 11/1451: {by selection of backup contents} - G06F 11/1464: {for networked environments} - G06F 11/1469: {Backup restoration techniques} - G06F 2201/81: Threshold - G06F 2201/84: Using snapshots, i.e. a logical point-in-time copy of the data - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computer-implemented method according to one embodiment includes creating a log of one or more events occurring during a performance of continuous data protection (CDP) for an instance of data; in response to identifying a conclusion of the performance of CDP for the instance of data, determining a value for the one or more events within the log; and conditionally creating and storing a snapshot of the instance of data, based on a comparison of the value for the one or more events to a predetermined threshold. ## Claims ### Claim 1 A computer-implemented method, comprising: creating a log of one or more events occurring during a performance of continuous data protection (CDP) for an instance of data; in response to identifying a conclusion of the performance of CDP for the instance of data, determining a value for the one or more events within the log; and conditionally creating and storing a snapshot of the instance of data, based on a comparison of the value for the one or more events to a predetermined threshold wherein the snapshot of the instance of data is stored in a snapshot storage location with a predefined capacity. ### Claim 2 (canceled) ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein during the performance of CDP for the instance of data, a new version of the instance of data is created and stored in a predetermined storage location each time the instance of data is changed. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the one or more events include system events that are identified within a system where the instance of data is stored. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the one or more events include a change in an operating system version of a system where the instance of data is stored. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the one or more events include a deletion of one or more portions of the instance of data. ### Claim 7 A computer-implemented method comprising: creating a log of one or more events occurring during a performance of continuous data protection (CDP) for an instance of data; in response to identifying a conclusion of the performance of CDP for the instance of data, determining a value for the one or more events within the log; and conditionally creating and storing a snapshot of the instance of data, based on a comparison of the value for the one or more events to a predetermined threshold, wherein the one or more events include a predetermined security event. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein the one or more events include a custom event. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein CDP is performed for the instance of data for a predetermined time period. ### Claim 10 (depends on 1) The computer-implemented method of claim 1, wherein: the conclusion of the performance of CDP for the instance of data initiates an age-out process for the instance of data, and during the age-out process for the instance of data, a numeric value is determined for each of the one or more events. ### Claim 11 (depends on 1) The computer-implemented method of claim 1, wherein: values for a plurality of the events are summed to determine a summed event value, and the summed event value is compared to a predetermined event value threshold. ### Claim 12 (depends on 11) The computer-implemented method of claim 11, wherein in response to determining that the summed event value exceeds the predetermined event value threshold: a snapshot, that includes all versions of the instance of data that were created during the performance of CDP for the instance of data, is created and stored in snapshot storage, and a most recent version of the instance of data is stored in a predetermined data storage location. ### Claim 13 (depends on 11) The computer-implemented method of claim 11, wherein in response to determining that the summed event value does not exceed the predetermined event value threshold: a snapshot of the instance of data is not created, and a most recent version of the instance of data is stored in a predetermined data storage location, where the most recent version of the instance of data does not include all previous versions of the instance of data that were created during the performance of CDP for the instance of data. ### Claim 14 (canceled) ### Claim 15 (depends on 1) The computer-implemented method of claim 1, wherein in response to determining that the predefined capacity has been filled with snapshots, a snapshot with an oldest associated entry date is removed from the snapshot storage location and stored in cloud-based storage. ### Claim 16 (depends on 1) The computer-implemented method of claim 1, wherein two or more snapshots are conditionally merged within the snapshot storage location, based on one or more criteria. ### Claim 17 A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to perform a method comprising: creating, by the one or more processors, a log of one or more events occurring during a performance of continuous data protection (CDP) for an instance of data; in response to identifying a conclusion of the performance of CDP for the instance of data, determining, by the one or more processors, a value for the one or more events within the log; and conditionally creating and storing, by the one or more processors, a snapshot of the instance of data in a snapshot storage location with a predefined capacity, based on a comparison of the value for the one or more events to a predetermined threshold. ### Claim 18 (depends on 17) The computer program product of claim 17, wherein in response to determining that the predefined capacity has been filled with snapshots, a snapshot with an oldest associated entry date is removed from the snapshot storage location and stored in cloud-based storage. ### Claim 19 (depends on 17) The computer program product of claim 17, wherein two or more snapshots are conditionally merged within the snapshot storage location, based on one or more criteria. ### Claim 20 (canceled) ### Claim 21 (depends on 17) The computer program product of claim 17, wherein the one or more events include a predetermined security event. ### Claim 22 (depends on 17) The computer program product of claim 17, wherein during the performance of CDP for the instance of data, a new version of the instance of data is created and stored in a predetermined storage location each time the instance of data is changed. ### Claim 23 (depends on 7) The computer-implemented method of claim 7, wherein during the performance of CDP for the instance of data, a new version of the instance of data is created and stored in a predetermined storage location each time the instance of data is changed.