Enterprise Vault Collection

[zeffy]

Hello,

I'm looking for help with the Collection feature.

I am running EV 10.0.4 and enabled the collection on my single partition using the recommended Symantec article.
Currently there's no full backup being completed yet, so I got an error regarding this in the Console.

Is the collection agent checks the completion of a backup before collecting files from the partition?
If not, why it doesn't collect my files?

I got this event in the EventLog:

A Partition's Collector run has finished.

Partition Root Path: D:\EVStorage\Express Vault Store\Express Vault Store Ptn1

Archived items: 0
Files added to collections: 0
Collections: 0

Time taken for the run [H:M:S]: 0:27:13

For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=10.0.4.0&build=10.0.4.1189&error=V-437-6855
 

Much Thanks.
 

[Rob_Wilcox1]

Yes, the collector will only collect savesets that have been backed up.

[AndrewB]

i'd really recommend doing a full backup of your environment before implementing new changes. however, if you want to "trick" EV into thinking it's been backed up you can use a trigger file. more on that here:

How to use a trigger file (IgnoreArchiveBitTrigger.txt or PartitionSecuredNotification.xml) for devices that do not support the Archive bit

Article:TECH35610

|

Created: 2004-01-19

|

Updated: 2014-05-02

|

Article URL http://www.symantec.com/docs/TECH35610

[zeffy]

Still not working (even when backup trigger is used):

A Partition's Collector run has finished.

Partition Root Path: d:\EVStorage\Express Vault Store\Express Vault Store Ptn1

Archived items: 0
Files added to collections: 0
Collections: 0

Time taken for the run [H:M:S]: 0:15:21

For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=10.0.4.0&build=10.0.4.1189&error=V-437-6855

[Rob_Wilcox1]

Please post or look for more event id's:

http://thingsilearnedtoday.net/2012/12/13/events-logged-for-collections/

[zeffy]

Events (cleared before using the "Run Now" on the partitions collections tab):

Indication for backup success:

Settings for collector:

[Rob_Wilcox1 · Accepted solution]

So, it might be that they won't be collected until 10 days after backup?

Have you tried running a DTRACE?

[zeffy]

Could be. I don't know how the mechanisim works with the "older then" setting. Is it older then last backup?

How can I setup DTRACE for collector?

Thanks.

[Rob_Wilcox1]

You'll need to DTRACE the StorageFileWatch process.

The online help explains a little bit about the settings, particularly:

Collect files older than. Enter the amount of time that must elapse since items were archived before they are eligible for collection.

Note the following:

• Enterprise Vault does not collect files until they have been backed up. Do not set the elapsed time to less than your backup frequency, otherwise Enterprise Vault wastes resources repeatedly checking whether the files have been backed up.

• To aid indexing performance, Enterprise Vault should index items before they are collected. You should therefore allow a minimum of one day before items are collected.

• A long delay provides no benefit, except that until collection occurs the items are retrieved more quickly.

[GabeV]

Hello zeffy,

Could you please capture a screenshot from the 'Backup' tab? If Enterprise Vault is still marking items as secured, you should see unsecured items under the backup tab. Also, checked the SQL databases fragmentation. If Enterprise Vault has never marked items secured and the SQL fragmentation is high, it might be affecting the process as well. Once the items are marked as secured, then EV will start collecting the savesets, thus, it's a two-steps process.

In addition, as Rob mentioned, collect a dtrace for StorageFileWatch, set/clear backup mode and review the dtrace log file.

[Rob_Wilcox1]

Did you get any further with this issue?

[zeffy]

Hi

Yes,

The archiving is completed now.

I used the trigger file and it started collection.

Do you have any idea how to identify archived cab's? what kind of extension is used?

[Rob_Wilcox1]

They have a .CAB extension.

[AndrewB]

glad to hear that setting up the trigger file helped you achieve your goal.