EV Delete Query

[San_Bangalore]

Trying to delete the EV account from Mailbox archiving. We are using EV 9.0.2, The EV account says it marked for deletion and I have been waiting for 5 days now the status shows the same.

I have already restarted the storage service. Any other actions need to be taken?

[Rob_Wilcox1]

Maybe you have items in those archives on legal hold?

Have you done a DTRACE?

[San_Bangalore]

What do I need run in Dtrace?

[GertjanA]

Hi,

I use below query to see how far deletion is:

select ex.MbxDisplayName, NrItems = count(*) ,"Size" = sum (s.itemsize)
from VaultStoreDatabase.dbo.saveset s
Join VaultStoreDatabase.dbo.Archivepoint a on a.ArchivePointIdentity =s.ArchivePointIdentity
Join EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry ex on ex.DefaultVaultID = a.ArchivePointID
Join EnterpriseVaultDirectory.dbo.Archive Arch on arch.archivename = ex.MBXDisplayName
where arch.ArchiveStatus=4 
group by ex.MBXDisplayName

Replace VaultStoreDatabase with the name of your vaultstoredatabase (where the archive is supposed to be in)

This will show how many items are in the archive. If you run this again after a few hours, the number of items should have dropped. As soon as it is 0, archive should be removed.

[Rob_Wilcox1]

StorageDelete, StorageManagement .. perhaps.

[GabeV]

This technote can help you to determine if you have legal holds:

Legal Hold Scripts
ttp://www.symantec.com/docs/TECH72381

[JesusWept3 · Accepted solution]

just StorageDelete is enough
When archives don't delete it can be one of the following things

1. Its just cached in the Vault Admin Console, a refresh will help
2. Items are on legal hold through Discovery Accelerator
3. User has an Entry in the VaultInterest table, meaning that they are part of a DA search, that search needs to be deleted for the VaultInterest entry to be removed
4. User has items archived in a Retention Category that does not permit deletes
5. Storage is a compliant device, such as an EMC Centera in Governance mode and the Centera is rejecting the deletes
6. Storage is in Read Only / Backup Mode preventing archiving or deletions to occur

And on some occasions you may see that it can't invoke the StorageServer in order to delete items, and restarting the EV services allows it to continue