Cannot restore items from Public Folder Vault. Event ID 2270 & 3213

[moreaboutmatt]

Hi,

Was wondering if someone could help with this really annoying issue. We've just upgraded to EV 10.0.2 and are having problems restoring items in Public Folders.

In Outlook, when trying to restore an item in Public Folders the icon changes to pending and then fairly quickly back to archived. Viewing the email by double clicking on it works fine, so it’s just a full restore of the item that doesn’t work.

In the logs on the EV server I'm seeing the following errors:

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          30/11/2012 14:08:18
Event ID:      3213
Task Category: Retrieval Task
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EVSERVERNAME.domain.com
Description: 

A RetrievePublicFolderItems request has failed.

Caller: /O=DOMAIN/OU=SITE/cn=Recipients/cn=USERNAME
Public Folder:  

Error: The parameter is incorrect.  (0x80070057)

For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=10.0.2.0&build=10.0.2.1112&error...

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          30/11/2012 14:08:20
Event ID:      2270
Task Category: Retrieval Task
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      EVSERVERNAME.domain.com
Description:

A queued operation exceeded the retry count and has been discarded

Exchange Public Folder Task for EXSERVERNAME(Retrieval)

Retrieved a [MsgID_RetrievePublicFolderItems (55)] MSMQ message on queue [EVSERVERNAME\Private$\Enterprise Vault Exchange Public Folder Task for EXSERVERNAME 305655120278 R2], but it's retry count [4] exceeds the maximum retry limit [3].

For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=10.0.2.0&build=10.0.2.1112&error...

Any help would be greatly appreciated.

Cheers...

Matt

[KarlW]

I'd suggest taking a Dtrace of the Retrieval task and look for where the error is occurring, if it's inclusive post the approrpriate lines here as that may help to get to an answer.

Thanks

Karl

[moreaboutmatt]

Thanks for the reply.

I did a dtrace on the RetrievalTask but got the same results as are shown in the event logs. Nothing else was very helpful. Any other paricular ones I should include in the dtrace to potentially show the problem?

[ZeRoC00L]

Maybe you can open a support request at Symantec, they can review the logfile in detail and assist you with troubleshooting this issue.

If you want, you can also attach the logfile to a post here so we may be able to view something.

[moreaboutmatt]

Hi All,

I know this is a really unsatisfying answer but on Friday morning all EV servers and SQL servers rebooted and had the latest OS patches installed. Come Friday morning everything was working again.

[Edit]

Unfortunately, come Monday morning and it's broken again. Back to troubleshooting.

[/Edit]

Matt

[moreaboutmatt · Accepted solution]

Hi, 

For those interested, this has now been acknowledged by Symantec as a bug. We'll hopefully get a resolution soon. Details can be found here:

http://www.symantec.com/docs/TECH200967

Thanks...

Matt