Search and analytics for storage systems

1. A method, comprising:

retrieving, by execution of one or more processors, a first backup object of a plurality of backup objects stored in a secondary storage system, wherein each backup object in the plurality represents a respective storage state associated with the secondary storage system at a respective point in time;

using the first backup object to perform a first level of reconstruction by reconstructing at least a portion of a full backup of a corresponding storage state associated with the first backup to obtain a reconstructed view of at least the portion of the full backup, wherein the first backup captures a snapshot since a previous backup using a B+ tree structure distributed among storage nodes of a distributed storage system;

performing a second level of reconstruction by reconstructing a first application object from at least the portion of the full backup reconstructed using the first backup object and the previous backup, wherein the first application object is nested in at least the portion of the full backup reconstructed using the first backup object, and the first level of reconstruction and the second level of reconstruction are performed to automatically and selectively access application level data encapsulated in at least the portion of the full backup reconstructed using the first backup object;

accessing the first application object according to a native application format associated with the first application object;

evaluating content stored by the first application object; and

modifying the first application object based on the evaluated content.

2. The method of claim 1 , wherein accessing the first application object includes using an application programming interface (API) associated with the first application object.

3. The method of claim 1 , wherein evaluating content stored by the first application object comprises:

identifying a second application object stored by the first application object; and

accessing the second application object stored by the first application object according to a native application format associated with the second application object.

4. The method of claim 3 , wherein modifying the first application object comprises:

identifying, based on the evaluation, specified content stored by the second application object; and

removing the specified content from the second application object.

5. The method of claim 3 , wherein accessing the second application object comprises:

invoking an application programming interface (API) associated with the second application object.

6. The method of claim 1 , wherein modifying the first application object comprises:

identifying, based on the evaluation, specified content stored by the first application object; and

removing the specified content from the first application object.

7. The method of claim 1 , further comprising:

building an index of content stored by the first application object.

8. The method of claim 1 , further comprising:

retrieving a second backup object of the plurality of backup objects stored in the secondary storage system;

reconstructing a second application object from the second backup object; and

replacing the first application object with the second application object in the first backup object.

9. A system, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:

retrieve, by execution of one or more processors, a first backup object of a plurality of backup objects stored in a secondary storage system, wherein each backup object in the plurality represents a respective storage state associated with the secondary storage system at a respective point in time;

use the first backup object to perform a first level of reconstruction by reconstructing at least a portion of a full backup of a corresponding storage state associated with the first backup to obtain a reconstructed view of at least the portion of the full backup, wherein the first backup captures a snapshot since a previous backup using a B+ tree structure distributed among storage nodes of a distributed storage system;

perform a second level of reconstruction by reconstructing a first application object from at least the portion of the full backup reconstructed using the first backup object and the previous backup, wherein the first application object is nested in at least the portion of the full backup reconstructed using the first backup object, and the first level of reconstruction and the second level of reconstruction are performed to automatically and selectively access application level data encapsulated in at least the portion of the full backup reconstructed using the first backup object;

access the first application object according to a native application format associated with the first application object;

evaluate content stored by the first application object; and

modify the first application object based on the evaluated content.

10. The system of claim 9 , wherein accessing the first application object includes using an application programming interface (API) associated with the first application object.

11. The system of claim 9 , wherein evaluating content stored by the first application object comprises:

identifying a second application object stored by the first application object; and

accessing the second application object stored by the first application object according to a native application format associated with the second application object.

12. The system of claim 11 , wherein modifying the first application object comprises:

identifying, based on the evaluation, specified content stored by the second application object; and

removing the specified content from the second application object.

13. The system of claim 11 , wherein accessing the second application object comprises:

invoking an application programming interface (API) associated with the second application object.

14. The system of claim 9 , wherein modifying the first application object comprises:

identifying, based on the evaluation, specified content stored by the first application object; and

removing the specified content from the first application object.

15. The system of claim 9 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to build an index of content stored by the first application object.

16. The system of claim 9 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to:

retrieve a second backup object of the plurality of backup objects stored in the secondary storage system;

reconstruct a second application object from the second backup object; and

replace the first application object with the second application object in the first backup object.

17. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

retrieving, by execution of one or more processors, a first backup object of a plurality of backup objects stored in a secondary storage system, wherein each backup object in the plurality represents a respective storage state associated with the secondary storage system at a respective point in time;

using the first backup object to perform a first level of reconstruction by reconstructing at least a portion of a full backup of a corresponding storage state associated with the first backup to obtain a reconstructed view of at least the portion of the full backup, wherein the first backup captures a snapshot since a previous backup using a B+ tree structure distributed among storage nodes of a distributed storage system;

performing a second level of reconstruction by reconstructing a first application object from at least the portion of the full backup reconstructed using the first backup object and the previous backup, wherein the first application object is nested in at least the portion of the full backup reconstructed using the first backup object, and the first level of reconstruction and the second level of reconstruction are performed to automatically and selectively access application level data encapsulated in at least the portion of the full backup reconstructed using the first backup object;

accessing the first application object according to a native application format associated with the first application object;

evaluating content stored by the first application object; and

modifying the first application object based on the evaluated content.

18. The computer program product of claim 17 , wherein accessing the first application object includes using an application programming interface (API) associated with the first application object.

19. The computer program product of claim 17 , wherein evaluating content stored by the first application object comprises:

identifying a second application object stored by the first application object; and

accessing the second application object stored by the first application object according to a native application format associated with the second application object.

20. The computer program product of claim 17 , wherein evaluating content stored by the first application object comprises:

identifying, based on the evaluation, specified content stored by the first application object; and

removing the specified content from the first application object.