cancel
Showing results for 
Search instead for 
Did you mean: 

EV10 event 41315 - indexing

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

Hello all,

Today, we had users reporting they got a message stating Enterprise Vault was not available on 1 server. Verifying the eventlog showed events 41315, from the Index Query Server, with message "Attempted to read or write protected memory. This is often an indication that other memory is corrupt. "

A service restart, together with an IIS restart seems to have resolved the issue.

I've verified some of the archives for which this was reported, and these are archives having more than 100.000 items in them. Researching the KB showed this article, http://www.symantec.com/docs/TECH66255 but it states this has been resolved in EV9.

Has anyone seen this before? What could i check further to determine the exact cause?

Thanks.

Gertjan

 

 

Regards. Gertjan
1 ACCEPTED SOLUTION

Accepted Solutions

GabeV
Level 6
Employee Accredited

Hi Gertjan,

Do you still need assistance? Have you checked this technote?

http://www.symantec.com/docs/TECH222621

View solution in original post

2 REPLIES 2

GabeV
Level 6
Employee Accredited

Hi Gertjan,

Do you still need assistance? Have you checked this technote?

http://www.symantec.com/docs/TECH222621

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

Hello Gabe,

Thanks!

We're using SEP. I doublechecked the exclusions, and found there is an exclusion for:

%[WINDOWS]%inf\Enterprise Vault Index Query Server\

This should be %[WINDOWS]%\inf\Enterprise Vault Index Query Server\

\ between %[Windows]% and inf

Thanks again.

GJ

 

 

 

Regards. Gertjan