I'm running ev 7.5sp4
it's seems to be for the user mailbox not journalling and we are not running fsa.
I think it's something with her offline vault cache
I've started a rebuild on her index and found 2 warning so far Error 7289
Event Type: Warning
Event Source: Enterprise Vault
Event Category: Index Server
Event ID: 7289
Date: 29/04/2009
Time: 8:47:01 AM
User: N/A
Computer: REG-EVS-01
Description:
Addition of offline item to index abandoned.
Index: 1363132EEE8D5424082AC998344183D011110000EVSITE/Volume:83 (UserName)
Saveset Id: 304000000000000~200801031329280000~0~93E975A5E97244A98E6073E635178D7
Sequence Number: 17
First requested: 2009-04-29 08:27:00
All previous attempts to retrieve the item from offline storage have timed out. To prevent further delays the item will not be indexed.
For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp