
Veeam Jobs OnJobCompleted
CertifiedEnterprise EditionTrigger a flow when a Veeam Backup & Replication job session completes
Veeam Jobs OnJobCompleted
Trigger a flow when a Veeam Backup & Replication job session completes
Polls /api/v1/sessions ordered by completion time (newest first) and emits one execution per evaluation
containing all sessions that reached a terminal state (SUCCESS, WARNING, or FAILED) since the previous
evaluation, whose session name matches jobNameFilter. Dedupe relies on the trigger's own evaluation date,
so sessions already reported in a previous execution are never emitted again. Paging stops as soon as it
reaches a session that completed at or before the previous evaluation, so evaluation cost stays bounded
instead of growing with the server's total session history. Because the cutoff is based on completion time
rather than start time, jobs that run longer than the polling interval are still caught the moment they
finish. Dedup compares the VBR server's session end time against the trigger's own evaluation date; if the
VBR server clock and the Kestra server clock drift, sessions can be missed or re-emitted at the window
boundary, so keep both clocks in sync (e.g. via NTP).
type: io.kestra.plugin.ee.veeam.jobs.OnJobCompletedExamples
Run a flow whenever a production backup job completes
id: veeam_job_completed
namespace: company.team
tasks:
- id: log
type: io.kestra.plugin.core.log.Log
message: "{{ trigger.count }} Veeam session(s) completed"
triggers:
- id: job_completed
type: io.kestra.plugin.ee.veeam.jobs.OnJobCompleted
host: "{{ secret('VEEAM_HOST') }}"
username: "{{ secret('VEEAM_USERNAME') }}"
password: "{{ secret('VEEAM_PASSWORD') }}"
jobNameFilter: "prod-*"
interval: PT5M
Properties
host *string
Veeam Backup & Replication server host
Hostname or IP address of the Veeam Backup & Replication server exposing the REST API.
password *string
Password
Password for username. Treat it as a secret, e.g. {{ secret('VEEAM_PASSWORD') }}.
username *string
Username
Veeam Backup & Replication account used for the OAuth 2.0 password grant.
allowConcurrent boolean
falseSpecifies whether a trigger is allowed to start a new execution even if a previous run is still in progress.
apiVersion string
1.3-rev1API version
Value sent as the mandatory x-api-version header on every request, including authentication. Must match a version
supported by the target server; a missing or unsupported value causes VBR to reject the request with HTTP 400.
Defaults to 1.3-rev1 (VBR 12.1 and later).
interval string
PT5MdurationPolling interval
Delay between two polls of /api/v1/sessions. A minimal interval of at least PT30S is recommended to
avoid overloading the VBR server.
jobNameFilter string
*Job name filter
Glob pattern matched against the session name (typically the parent job's name), for example prod-*.
Defaults to *, matching every job.
options
HTTP client configuration
Optional HTTP client overrides (timeouts, proxy, TLS). Veeam Backup & Replication servers ship a
self-signed certificate by default: set options.ssl.insecureTrustAllCertificates: true, or provide a
trust store, otherwise the first request fails with a TLS handshake error.
io.kestra.core.http.client.configurations.HttpConfiguration
falseIf true, allow a failed response code (response code >= 400)
List of response code allowed for this request
The authentication to use.
io.kestra.core.http.client.configurations.BasicAuthConfiguration
The password for HTTP basic authentication.
The username for HTTP basic authentication.
io.kestra.core.http.client.configurations.BearerAuthConfiguration
The token for bearer token authentication.
io.kestra.core.http.client.configurations.DigestAuthConfiguration
The password for HTTP Digest authentication.
The username for HTTP Digest authentication.
UTF-8The default charset for the request.
java.nio.charset.Charset
trueWhether to enable TCP Keep-Alive extended socket options (TCP_KEEPIDLE, TCP_KEEPINTERVAL, TCP_KEEPCOUNT).
Set to false when running on Windows workers, as these extended socket options are not supported by the Windows JDK and will cause connection failures.
trueWhether redirects should be followed automatically.
REQUEST_HEADERSREQUEST_BODYRESPONSE_HEADERSRESPONSE_BODYThe enabled log.
The proxy configuration.
io.kestra.core.http.client.configurations.ProxyConfiguration
The address of the proxy server.
The password for proxy authentication.
The port of the proxy server.
DIRECTDIRECTHTTPSOCKSThe type of proxy to use.
The username for proxy authentication.
Retry strategy for HTTP requests.
retry is disabled by default.
Constant retry
Retry with a fixed delay between attempts.
durationRETRY_FAILED_TASKRETRY_FAILED_TASKCREATE_NEW_EXECUTION>= 1durationfalseExponential retry
Retry with exponentially increasing delays between attempts.
durationdurationRETRY_FAILED_TASKRETRY_FAILED_TASKCREATE_NEW_EXECUTION>= 1durationfalseRandom retry
Retry with a random delay within a configurable range between attempts.
durationdurationRETRY_FAILED_TASKRETRY_FAILED_TASKCREATE_NEW_EXECUTION>= 1durationfalse[502,503,504]HTTP status codes that should be retried.
Used for idempotent methods (GET, HEAD) without their own entry in retryOnStatusCodesByMethod. Non-idempotent methods are never retried on a status code unless listed in retryOnStatusCodesByMethod. Defaults to 502, 503 and 504 for idempotent methods (GET, HEAD) only.
Per-HTTP-method overrides for which status codes should be retried.
Keys are HTTP methods (e.g. GET, POST). A method with no entry here falls back to retryOnStatusCodes. This lets a caller retry more broadly for safe, read-only methods (for example, every 5xx and a 429 for GET/HEAD) while keeping a narrower list for methods that write, where retrying a request that may have already been processed by the origin risks duplicating the effect. Example: {GET: [429, 500, 502, 503, 504], HEAD: [429, 500, 502, 503, 504]}.
["GET","HEAD"]HTTP methods for which any transport-level failure may be retried.
A transport-level failure is a connection or timeout error rather than an HTTP response (e.g. a read timeout or a connection reset mid-request). For a method listed here, any such failure is retried. Defaults to GET and HEAD HTTP methods.
The SSL request options
io.kestra.core.http.client.configurations.SslOptions
Whether to disable checking of the remote SSL certificate.
Only applies if no trust store is configured. Note: This makes the SSL connection insecure and should only be used for testing. If you are using a self-signed certificate, set up a trust store instead.
The timeout configuration.
io.kestra.core.http.client.configurations.TimeoutConfiguration
The time allowed to establish a connection to the server before failing.
PT5MThe time allowed for a read connection to remain idle before closing it.
port integerstring
9419REST API port
TCP port of the Veeam Backup & Replication REST API. Defaults to 9419.
stopAfter array
CREATEDSUBMITTEDRUNNINGPAUSEDRESTARTEDKILLINGSUCCESSWARNINGFAILEDKILLEDCANCELLEDQUEUEDRETRYINGRETRIEDSKIPPEDBREAKPOINTRESUBMITTEDList of execution states after which a trigger should be stopped (a.k.a. disabled).
when string
trueA condition that determines whether the trigger should run.
A Pebble expression evaluated at trigger time. The trigger fires only when the expression evaluates to a truthy value (true, a non-empty string, a non-zero number). Use this to gate trigger execution on dynamic runtime values such as execution labels, flow variables, or environment conditions.
Outputs
count integer
Number of sessions returned
sessions array
Sessions that completed since the previous evaluation
io.kestra.plugin.ee.veeam.sessions.SessionRecord
date-timeSession creation time
date-timeSession end time
Populated once the session has reached a terminal state.
Session id
Parent job id
Session name
Raw session result
Raw result value returned by the API, for example None, Success, Warning, or Failed.
Raw session state
Raw state value returned by the API, for example Working, Stopped, or Idle.
RUNNINGSUCCESSWARNINGFAILEDUNKNOWNNormalized session status
Derived from state/result: RUNNING, SUCCESS, WARNING, FAILED, or UNKNOWN.