Forum Discussion

Victor_Castro's avatar
6 years ago

EV with 4 Critical alerts status

Hi community am Víctor... and i new in veritas EV

i have a new client with EV and now its my resposability to admin this platform... but i take it with several errors that i dont know how to throubleshoot... i need to understand the product.... i need to solved one by one and i need your help please...

Errors: 

  • Deleted items waiting to be deleted from indexes (13959 items deleted from vault but not from indexes)
  • New item awaiting backup or replication (9906281 savesets that have not yet been backed up for Vault Store)
  • Days since last check that newly-archived data is secure
  • Days since Exchange journal mailbox scanned for new items
  • Many index with Missing Items and 1 Index with Status Failed

i attach images with the evidence.... please help me... i need orientation

Many thanks

 

10 Replies

  • Hello Victor,

    Managing EV without having knowledge is going to be a challenge...

    The main thing you need to work on is the 'items awaiting backup or replication'. This usually means that you need to make sure the backup of the archived items has been performed. To get rid of these, you need to set backup mode on the Vault Stores, and then clear backup mode again. that should process the 'items waiting backup'. BUT... that depends on what storage you use, and how backup is being done. If you check the properties of the Vault Store partitions, what is the backup type? Do you have 'use archive attribute' or 'check for triggerfile'? If archive attribute, verify the backup is actually clearing the archive attribute. If you use a triggerfile, verify the triggerfile is written before the backup mode is cleared. Setting/Clearing backup mode should also fix that 'deleted items waiting to be deleted from indexes'.

    Days since Journal Mailbox scanned indicates an issue with archiving the Journal Mailbox. does the journal mailbox have items to be archived? If so, verify the task is not in report mode, and the vault store where the archive is is not in backup mode. If both are true, restart the archiving task for that journal mailbox.

    For your indexes, a failed index you should try a Sync index first. If that fails, do a rebuild of the index. For the others (having items missing from index), you can try a sync first. Verify you have diskspace left at your index locations.

    IF this is going to be a lengthy assignment, see if you can get a training on EV, admin I and/or II preferably. That should give you a better understanding of how to handle these kind of issues.

    • Victor_Castro's avatar
      Victor_Castro
      Level 3

      Thanks for your reply,

      I check your suggestions and for your Questions i have Answers:

      I set the Backup Mode and after 1 minute, i Clear the Backup Mode (I attach images)

      1. In the Vault Store partitions, what is the backup type?
        1. It have configured "Use the archive attribute" (see de image attached)
      2. Verify the task is not in report mode, and the vault store where the archive is is not in backup mode. If both are true, restart the archiving task for that journal mailbox 
        1. The task it not in report mode... and the vault its not in Backup Mode... I restart the task for Journal Mailbox
      3. A failed index you should try a Sync index first. If that fails, do a rebuild of the index
        1. I Syncronized the Index but finalice with Warning "Items with errors" status
        2. I Rebuild the Index and im waiting to finish 
      4. For the others (having items missing from index), you can try a sync first
        1. I Syncronized 13 indexes with <10 Missed Items and all of them finaliced with Warning "Items with errors" status (See the Image Attached)
      5. Verify you have diskspace left at your index locations
        1. I have in the F: Disk more than 16Gb free of 100Gb total size (See the imaged attached)

       

      Any suggestion to continue reviewing this issues??

      Thanks

      • GertjanA's avatar
        GertjanA
        Moderator

        hmm. Are you running SQL and EV on the same server? That is (for a production server) not really supported. For a test environment it is ok, but for production it is a bit dangerous. You might have an overload on the server, due to SQL processing.

        You also need to think about adding/expanding the Index location disk. The advise is to keep at least 10% free space on index locations.

        It is 'normal' some items fail to index. The items are either corrupt, encrypted, or otherwise not indexable. In the index administartion tool, if you click the name of one of the archives, you should be able to click Report. That shows what the issue might be.

        You see in the backup screenshot you send, that EV is actually scanning the location for 'items which are backed up'. Patience :-)... If you open Internet Explorer on the EV server, go to: http://localhost/enterprisevault/usage.asp, you will get a page showing info on the archives. If you refresh, you should see the 'items awaiting backup' going down. If it does not, verify the backup is actually clearing the archive attribute. If it does not, set backup mode, then use the command prompt to clear the archive attribute (attrib -a *.* /s (I believe)). Then clear backup mode.

        For the rest, see if you can get someone onsite to give you some first start in EV. That will save you headaches, and hopefully assists in getting you to know EV faster.