Today, we had users reporting they got a message stating Enterprise Vault was not available on 1 server. Verifying the eventlog showed events 41315, from the Index Query Server, with message "Attempted to read or write protected memory. This is often an indication that other memory is corrupt. "
A service restart, together with an IIS restart seems to have resolved the issue.
I've verified some of the archives for which this was reported, and these are archives having more than 100.000 items in them. Researching the KB showed this article, http://www.symantec.com/docs/TECH66255 but it states this has been resolved in EV9.
Has anyone seen this before? What could i check further to determine the exact cause?
Solved! Go to Solution.
We're using SEP. I doublechecked the exclusions, and found there is an exclusion for:
%[WINDOWS]%inf\Enterprise Vault Index Query Server\
This should be %[WINDOWS]%\inf\Enterprise Vault Index Query Server\
\ between %[Windows]% and inf