Thanks.
Well the event log says that its failing to sync some mailboxes because they're over-quota. Not many though. Does that mean syncing uses the A5 queue too?
The event log has a lot of strange errors for a few mailboxes, or a specific message sent to many mailboxes:
Event Type: Warning
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 2270
Date: 16/02/2013
Time: 06:54:35
User: N/A
Computer: EV1
Description:
A queued operation exceeded the retry count and has been discarded
Exchange Mailbox Archiving Task for EX1
Updating moved items in a folder. Folder path: [-Inbox-Mission-Mike-family 31.03.-20.04.2012], Exchange mbx DN: [/O=Company/OU=Site/cn=Recipients/cn=x], archive ID: [15D058FF179E5C08C0838B2D7F1110ev1].
Archive folder ID: [1DF62C4944B4CAC63E32B4E5111ev1], folder retention category: [], EVPM folder: [False], compressed item request XML length: [2616].
Error: [0x80004005]
Event Type: Error
Event Source: Enterprise Vault
Event Category: Storage Online
Event ID: 6578
Date: 16/02/2013
Time: 06:54:35
User: N/A
Computer: EV1
Description:
Abnormal error occurred
Object: CRetentionCategoryCache
Reference: RE(1)/fe
For more information, see Help and Support Center at
evevent.symantec.com/rosetta/showevent.asp?EvtID=6578
Data:
0000: 54 68 65 20 70 61 72 61 The para
0008: 6d 65 74 65 72 20 69 73 meter is
0010: 20 69 6e 63 6f 72 72 65 incorre
0018: 63 74 2e 20 20 28 30 78 ct. (0x
0020: 38 30 30 37 30 30 35 37 80070057
0028: 29 )
And a couple of these:
Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 3432
Date: 16/02/2013
Time: 06:26:26
User: N/A
Computer: EV1
Description:
One or more errors occurred during the creation of a profile to connect to an Exchange Server.
Targeted Exchange Server: EX1
Mailbox: SMTP:SRV-APP-EX1@company.com
ConfigureMsgService failed with the following errors:
Out of memory error has occurred for the following connection points:
EX1
dc1
This indicates that the maximum number of connections has been consumed on this Enterprise Vault Server.
And these:
Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 3433
Date: 13/02/2013
Time: 01:46:50
User: N/A
Computer: EV1
Description:
Could not build a saveset for the message titled [Photos nov 2012] in Mailbox [/O=Company/OU=Site/cn=Recipients/cn=SIM], function [CArchivingAgent::PI_BuildSaveset] failed.
Error: 0x8004011B
Description: Unknown error 0x8004011B
For more information, see Help and Support Center at
evevent.symantec.com/rosetta/showevent.asp?EvtID=3433
Event Type: Error
Event Source: Enterprise Vault
Event Category: Storage Archive
Event ID: 6592
Date: 13/02/2013
Time: 01:33:13
User: N/A
Computer: EV1
Description:
Abnormal error occurred
VaultId: 122E420426A10B8C5200D0978B001110090ev1
Reference: CStore::GetOpenPartitionVolume()/Invalid device type
For more information, see Help and Support Center at
evevent.symantec.com/rosetta/showevent.asp?EvtID=6592
Datta:
0000: 43 61 74 61 73 74 72 6f Catastro
0008: 70 68 69 63 20 66 61 69 phic fai
0010: 6c 75 72 65 20 20 28 30 lure (0
0018: 78 38 30 30 30 66 66 66 x8000fff
0020: 66 29 f)
And similarly:
Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 2244
Date: 13/02/2013
Time: 01:07:49
User: N/A
Computer: EV1
Description:
An error occurred whilst processing the message titled: Photos nov 2012 for mailbox: /O=Company/OU=Site/cn=Recipients/cn=sim, the message will not be archived and could not be changed back from the Archive Pending state.
Seems to be a corrupt message in many different mailboxes....
And the usual end-user problem warning:
The folder has Default permissions set that grant all users access to this folder. By default, this has not been synchronized to the users archive.
And lastly:
The Exchange mailbox provisioning task found enabled mailboxes that are not part of a provisioning group. These mailboxes cannot be archived. If you do not want these mailboxes to be archived, use the Administration Console to disable them. See the provisioning task report for further details (full reports only).
The converter logs have this type of entry often:
Event Type: Warning
Event Source: Enterprise Vault Converters
Event Category: Storage Archive
Event ID: 28993
Date: 16/02/2013
Time: 03:54:48
User: N/A
Computer: EV1
Description:
Unable to convert item content
Reason: Unspecified error (0x80004005)
Supplementary Info: file could not be opened (7) [CS2D]
Item: Saveset Message for Mailbox /O=Company/OU=Site/cn=Recipients/cn=simx,
Attachment:
Type: zip
Vault ID: 187BE50D844E850DB134AFA643DB1100ev1
SaveSet ID: 201302163215~2013011600000~Z~11497076C19E9947AE067367041
Attachment ID: 1
This item will be archived without a preview being available to the web application and the content will not be indexed. It is not possible to search on the content but the item can be restored as normal
Thanks for any advice if anything is really strange here. There are so many but it's probably normal with a few thousand mailboxes.