Hi,

i want to start using an internal Wsus server for our clearwell servers, but i am wondering, can any Microsoft offered patch be applied? including the MS Office patches?

are there certain patches that we need to exclude?

If so, is there list of KB numbers that i should NOT apply to a Clearwell server? Are all MS updates tested for compatibility by Symantec? or does Symantec have a list of verified patches that are allowed to be applied?

Hi all,

I've an EV 11.0.1 that is archiving domino and I get a lot of time the error with evenid 41050

"Task: Domino provisioning task for dominotargetname

Unable to initialize Names and Address Book (NAB) session for Domino server: 'Failed to create Notes Session (mutex)'"

Has anyone seen this error before?

The solution is to switch the cluster but I need to find which is causing the problem.

Previously working Enterprise Vault 10 on Windows 2012 - We have an issue with at least two users where when we search for emails, Discovery Accelerator is skipping several months or not finding emails at all then must reboot the Discovery and EV server. (We are journaling.) For example, b/w two dates, there are several months missing. If I search 1/2014 - 5/2015, accept / export the results and view the emails, we might be missing emails from 10/2014 - 4/2015. The results are really inconsistent with different hit values after doing the same searches. 

Could anyone provide any insight to how to start to troubleshoot this issue?   

There are two error messages I notice during this process:

1. (When selecting the user) "Some custodians do not have values for Primary attribute".......... (Yes - Symantec's answer is to upgrade everything)

2. Event log errors, missing emails:

APP AT - Customer ID: 2 - Warning:
Some items could not be searched:
Archive: 'Journal Archive'
ID: 1FA042CB64BA9B64591527A429C9AE9541110000houevault
Index Volume: 2619
Search ID: 264

Description:
Items or content missing from the index
Reason: Items or content missing from the index
Stack:

3. Event log errors after we start getting 0 hits:

APP AT - Customer ID: 2 - Error processing Vault to Search off the queue: Searching Vault Thread - worker thread for index server: 1 (7)
Vault ID: 9992
Number of tries: 5
Cause:Index Search failed: APP AT - Customer ID: 2 - Error processing Vault to Search off the queue: Searching Vault Thread - worker thread for index server: 1 (7)
Vault ID: 9992
Number of tries: 5
Cause:Index Search failed: APP AT - Customer ID: 2 - Error processing Vault to Search off the queue: Searching Vault Thread - worker thread for index server: 1 (7)
Vault ID: 9992
Number of tries: 5
Cause:Index Search failed: APP AT - Customer ID: 2 - Error processing Vault to Search off the queue: Searching Vault Thread - worker thread for index server: 1 (7)
Vault ID: 9992
Number of tries: 5
Cause:Index Search failed: %1    Index: %3   Internal reference: %2      (0xc0041c0e)    Index: %3   Internal reference: %2      (0xc0041c0e)    Index: %3   Internal reference: %2      (0xc0041c0e)    Index: %3   Internal reference: %2      (0xc0041c0e)

Index Search failed: Index Search failed:     Index:    Internal reference:       (0xc0041c0e)  
Index: 1FA042CB64BA9B64591527A429C9AE9541110000houevault/VolumeSet:1796 
Internal reference: SRCI 

Thanks 

Hi

We are using Symantec Enterprise Vault 10.0.4 for Microsoft Exchange. I have been contacted by other group, wherein they are using Oracle DB for their application. Does Symantec Enterprise Vault provide the feature of archiving Oracle DB? This is for the first time I am hearing about these so checking with team. Thanks in advance

Hello

Can someone tell me how quickly email content is indexed once it is in Enterprise Vault.Cloud?

I know it appears instantly but i presume there is a delay before it is indexed and therefore available to the search function.

Thanks

Jonathan

Hi

We have about 11 TB of PST data to ingest into the vault. All the data is currently on the client's C drive. I've been reading the Symantec WhitePaper and there doesn't seem like any "clean" way to get the psts mapped from the end user's machine, into a holding area and then into the proper vault mailbox.

Anyone have experience migration this magnitude of data into the Vault? We're running EV 10.0.4 and all the laptops are Windows 7

Thank you in advance,

Janine

I don't seem to getting the traction here so wanted to word it a different way, maybe my explanation of what I was trying to do didn't compute.  :)

EV for Microsoft Exchange was set up by a geopartner years ago and configured as two separate EV sites (2 separate Directory Databases).  We are now attempting to reorganize Enterprise Vault into a single EV site.  I thought that Akaibu Evolve would do the trick and have since discovered it does not.   The advice received was to join these two directory databases in SQL.   I'm not sure this is the correct (and supported) answer, anybody have any insight?

Note that there will be an EV presence on East and West coast as I'm setting up FSA and SharePoint as well.   Existing email archives will not be moved.

Also, Discovery Accelerator is in the mix.

KT

Hello,

Using Discovery Accelerator 9, I've exported out a significant amount of email for a custodian (about 50GB).  I've selected to export as 'Original Type' and to encapsulate in a PST format.  Doing this, I've run across a couple of questions that I'm not able to answer fully and I'm hoping someone here can do so.

Question 1: The PST files split into 1.32GB size chunks and seems to divide the PST files exactly on this size (like a zip file).  After looking at a PST file, it seems to possibly parse the msg files in different PST files.  Meaning an email with one attachment can possibly save the email in one PST and the attachment in another.  Is this something that it does?  If so, is there an option to have it not do this?

Question 2: After the above, it also looks like it does not retain original folder structures (maybe it never had one being in the archive).  If this is correct, is there another method of export that may solve that?

Thanks so much for any help.

Hi,

Looking for the best way to do some trend analysis for EV. So i'd like to know the volume of data we'll archive in a year if we continue at the current rate? Or something similar.

We have the reporting services installed so what are the best ways to measure this?

Hello all.  After configuring the OWA/EV webapp we see the Enterprise Vault tab however when we click on it we get an "initialization failed" message.  I read a few other community posts and some support threads and nothing has worked to correct the issue.  EV is published externally as well but at this point we are just trying to get it working internally.  Trying it internal and external has the same result error "initialization failed".

The environment is as follows:
x3 Exchange 2013 CAS/MBX servers SP1 RU8
2x EV v.11.01 (mailbox archiving, journaling)
F5 load balancer

Script we implemented:
$Mbx = get-mailbox "mailbox"
New-App -OrganizationApp -DefaultStateForUser:enabled -Url ("http://evarchive1.xyz.com/EnterpriseVault/OfficeMailAppManifest.aspx?LegacyMbxDn=" + $Mbx.LegacyExchangeDN + "&BaseURL=https://evarchive1.xyz.com/EnterpriseVault")

Errors Shown:
When running a trace in the browser i see the following error after clicking on the Enterprise Vault tab on a message in OWA

EVOMA (ERROR) 11:24:50.232: logAndReportFailure: EWSFindAssociatedItem.onEwsRequestComplete ID[ERROR_EWS_ERRORRESULTSTATUS] Err[Failed to send a request to the Exchange Server]  [Result status:failed]

Things we have tried...

The Exchange Auth Cert thumprint matches an appears to be correct as per http://www.symantec.com/docs/TECH222757

We tried bypassing the Hardware Load balancer via host file and point direct to EV and Exchange as appropirate and get the same result.

We have tested EWS virtual direcotries on Exchange and have used other webapps such as bing maps and everything checks out ok.  No errors.

When i run a dtrace i dont see anything - i believe its because i am not even making it to Exchange yet.

Also tried the basic things like restarting IIS on EV and Exchange servers, etc.

Any help would be appreciated.

Hi,

Wee have TRIM configured on Enterprise vault. Trim account was having EV roles “Extension Content Provider Application” and “Task Applications”. and additionally we have given power administrator permission to TRIM service account.

 But still we are getting the below error message.

2015-06-19 17:47:22.623  INFORMATION    record type:             Component
2015-06-19 17:47:22.623  INFORMATION    extension type:          VMBX
2015-06-19 17:47:22.623  DEBUG        SetUserFieldValue: Entering Function!
2015-06-19 17:47:22.670  DEBUG        SetUserFieldValue: Set Value: BATCHRUN_RECHECK for Additional Field: MailRenditionState
2015-06-19 17:47:22.686  DEBUG        GetFileFromEnterpriseVault: Entering Function!
2015-06-19 17:47:23.498  ERROR        GetInformation failed: Access denied. Insufficient permissions to access the requested object(s).
2015-06-19 17:52:22.693  WARNING      Timeout while trying to get Item-properties from Enterprise Vault.

TRIM is unable to get the information from EV and getting above error.

Could you please suggest.

Hi,

Originally I started to investigate a problem items stuck in "waiting for bu".

So I ended up checking all kinds of things and also ran the query to see the indexing situation. I got the main problem solved but now nothing in the VAC is alarming about anything etc but there are Items as a result of this query:

SELECT A.ArchiveName "Archive Name",

CE.ComputerName "Index Server",

(IRP.IndexRootPath + '\' + IV.FolderName) "Folder Path",

COUNT(JA.IndexCommited) "Items Awaiting Index",

IV.Failed "Index Failed",

IV.ReadOnly "Index ReadOnly",

IV.Offline "Index Offline",

IV.Rebuilding "Index Rebuilding",

IV.WorkPending "Work Pending"

FROM EnterpriseVaultDirectory.dbo.Archive A,

EnterpriseVaultDirectory.dbo.Root R,

EnterpriseVaultDirectory.dbo.IndexVolume IV,

EnterpriseVaultDirectory.dbo.IndexRootPathEntry IRP,

EnterpriseVaultDirectory.dbo.IndexingServiceEntry ISE,

EnterpriseVaultDirectory.dbo.ComputerEntry CE,

EVVSVaultStore_1.dbo.ArchivePoint AP,

EVVSVaultStore_1.dbo.JournalArchive JA

WHERE JA.ArchivePointIdentity = AP.ArchivePointIdentity

AND AP.ArchivePointId = R.VaultEntryId

AND R.RootIdentity = A.RootIdentity

AND R.RootIdentity = IV.RootIdentity

AND IV.IndexRootPathEntryId = IRP.IndexRootPathEntryId

AND IRP.IndexServiceEntryId = ISE.ServiceEntryId

AND ISE.ComputerEntryId = CE.ComputerEntryId

AND JA.IndexCommited = 0

GROUP BY A.ArchiveName, CE.ComputerName,

(IRP.IndexRootPath + '\' + IV.FolderName),

IV.Failed, IV.ReadOnly, IV.Offline,

IV.Rebuilding, IV.WorkPending

ORDER BY "Items Awaiting Index" DESC

 I have verified, synchronized and eventually even rebuilt the index of this user and still this remains. And the number is groving so it looks like the newly archived ites also go to this queue. How do I force this to work and not be pending?

The ev version is 10.0.4 / OS win server 2012 R2 standard

As I said, from the console it looks like the index is fine etc but this tells a different story... any suggestions?

Sani B.

Hi

Can EV DA use the 'numrange' boolean search to search for content that includes numbers?

eg numrange '000..100' to search for all numbers between 0 and 100

thanks in advance

Can someone please explain how EV shortcut connects to Evault to retrieve archived email?  We are testing different scenarios.  One of them is to save some shortcuts to a PST file and access them from the PST file.  There is no problem at first.  However, when the same user logging on the same machine but start a different Outlook profile, a profile points to an Exchange server that the Evault server does not know about, the shortcuts don't work.  When double click on the shortcut, it doesn't open archived email, it only open the shortcut stub.

I thought accessing archived emails doesn't involve Exchange, how can a different Outlook profile make a difference?

Someone told me that they can move the shortcuts to an Exchange server that is not archived or known by the Evault server and the shortcuts still work.  I assume it is true because I thought we don't the need Exchange server to read from Evault.  From the above PST scenario, it looks like the Exchange server is involved somehow, or it is profile related.  Can someone please enlighten me on this?

Thank you.

i was trying to retore the bulk of data within the same file server through evault fsautility option but its giving an error invaild volume.

i am entering the below command, please find the below command.

C:\program files (x86)\enterprise vault>fsautility -b -s "\\pbad-emdesign\DOKAEP\ARABIAN MANUFACTURER FOR PANEL BOA
RD" -recurse

FSA Data Mover Utility.
Symantec Enterprise Vault.
Copyright (c) 2010. Symantec Corporation.

Bulk Recall of Placeholders
Folder      : \\pbad-emdesign.pbad.sbg.com.sa\DOKAEP\ARABIAN MANUFACTURER FOR PANEL BOARD
Error: Invalid volume DOKAEP

please kindly given me the solution for this issue.

Thanks and Regards

Mohammed

Hi,

i´ve got a problem with the number of moved shortcut within every archiving task.

The environment:

Enterprise Vault 11.0.1
Windows Server 2008 R2
Exchange 2010

Every time, the Mailbox Archiving Task runs through the Mailboxes there are a lot of moved shortcuts without moving a shortcut inside the mailboxes.

For example:

A mailbox have 19360 shortcuts. When I start the Mailbox Archiving Task for this mailbox there will be 19360 moved shortcuts after this run.
The user of this mailbox has moved no shortcuts!
When I start the Task again, there will be 19360 moved items again in this mailbox.
 

Here is a short snippet of a dtrace for one shortcut:

5230    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#12569} processing shortcut [WG: Passwort für Bänder Außenstellen], size [2215] bytes
5231    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#12775} shortcutexpiryperiod 0, deleteexpireditems T, orphanedshortcut T
5232    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#12778} Update moved items: [True], update RC: [True], update RC user: [False].
5233    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#13133} Using default ExpiryDateBasis: Archived Date
5234    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CRetentionCategoryCache::GetRetentionCategoryData} (Entry) Retention category [13502624DA8F83B42A5C51CBFFED5A7001b10000evarchiv00]
5235    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CRetentionCategoryCache::GetRetentionCategoryData} (Exit) Status: [Success]
5236    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#13159} Expiry Basis on Retention Category is [EXPIRY_BASIS_INHERIT_FROM_SITE (2)].
5237    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#13164} Expiry Basis on Site is [EXPIRY_BASIS_ARCHIVED_DATE (0)].
5238    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#13290} shortcut status flag has been set on the item with value [3]
5239    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CArchivingAgent::ItemsArchiveIDSameAsParents:#13736} Item's Archive ID [186A9D4A0F98DEA45B399AED6DCB54B331110000evarchiv00] [does] match parent [folder]'s Archive ID.
5240    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CArchivingAgent::ProcessShortcutItem:#13347} Retention category has not changed
5241    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:M    {CArchivingAgent::ProcessShortcutItem:#13358} [WG: Passwort für Bänder Außenstellen] this is a moved item so add it to our list of moved items
5242    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CArchivingAgent::ConstructMovedItemXml:#13810} Generating XML element for [EV8+] moved item.
5243    13:46:09.384     [11544]    (ArchiveTask)    <18612>    EV:L    {CArchivingAgent::ConstructMovedItemXml:#13863} Base64 encoding [242] byte element data.

​The item above was not really moved within the mailbox. Don´t know, why EV marked this shortcut as moved. Every archiving task, this object will be marked as "moved". 
When I try to open the shortcut, it works. The mail opened without any problems.

In an another mailbox are 25000 shortcuts, but on every archiving task EV moved between 40000 and 45000 shortcuts.

Any ideas, how I can solve this problem?

Hi all,

We have scheduled a job to run on every thursday to restart EV services

Enterprise vault task controller service,

Enterprise vault storage service

Enterprise vault directory service,

Enterprise vault indexing service,

Enterprise vault Admin service,

This scheduled job will first stop the services and then it will start the services.

While stopping the task from "Task controller to Admin service", I am getting error in Storage service while stopping  as "The Enterprise Vault Storage Service service could not be stopped".

But while i monitoring event in server the "Enterprise vault storage" service was stopped successfully but in log file am getting this error message. could you please assist me to solve this issue.

Hi,

Is there a way to check a mailbox for EVPM applied settings or policies?

I have applied a different age based policy for Calendar items as per https://www-secure.symantec.com/connect/forums/different-age-based-archiving-rules-folders-same-mailbox but how can I check which mailboxes have the policy? or check if a specific mailbox has the policy?

I don't see anything in the Vault Information and I have checked the mailbox via a MAPI editor and don't see anything obvious.

Anyone have any ideas?

Thank you.

Hi,

Is there a way to see or audit ALL searches made in Discovery Accelerator (I am using 10.0.4)? I have had a look in the SQL database for DA, but that only seems to show what searches were accepted/saved with a case.

What I would like is to be able to see every search that staff are doing, not just the ones that have been accepted/saved.

regards

Jim

I am currently performing an EV migration from W2K3 servers to W2K8R2 servers (2 of each), and having done all the preparation work am at the stage where I am running the migration wizard.

I ran the extract on the directory server (runs Email archiving tasks) and the extract completed in a few minutes and produced 1MB of output - all files there as I expect.  This is what I have observed previously when performing this type of migration on both email and Journal servers (not done previously on a server running FSA).

I then ran the extract of the FSA EV server (runs the FSA tasks) and the extract said it required 99GB of space and has been running for well over an hour at this stage - producing 2.2GB so far).  It is producing hundreds of report files (evsmr files).  When i look into these files they appear to be details of the files archived - but I annot be sure.

My issue is do I need all of these files for the import or are they purely informtional ?  If I leave these to run it will take hours at this rate.  Can I cancel the wizard (as this is the last step and all previous steps are comleted OK) and proceed with an import on the new server with no issues ?

AJ