Enterprise Vault (Event Id 6728)

[allanh1]

Hi All,

Hope you can help.  Since we restarted one of our EV servers the other day - the event logs are constantly filling with what appears to be a debug of the storage service - as you can imagine its filling the logs constantly.

I have checked the registry and everywhere i can think of as to why this would have started happening, but cant seem to find anything to indicate this.

All the event Logs Have Cache Statistics Report in event id 6728 (which i cant find anywhere) Im guessing its related to the vault cache but cant see why this would generate the amount of event logs we are seeing.

Any ideas how to turn it off?

Dtrace extract:

67644 07:56:01.856  [8676] (StorageArchive) <1396> EV~I Event ID: 6728 Cache Statistics Report | |Process Id: 8676 |Executable: C:\Program Files (x86)\Enterprise Vault\StorageArchive.exe | |Cache Name: VaultCache |Maximum Entries: 3000 |Entry Expiry Timeout: 900 (seconds) | |Number of Entries: 182 |Elapsed: 0:0:0 (hours:minutes:seconds) |Hits: 0 |Misses: 0 |Expiries: 0 |Evictions: 0 |
67645 07:56:01.856  [8676] (StorageArchive) <1396> EV:M CStgCacheControl::ActionControlRequest Log Reset: T Cache:0
67646 07:56:01.856  [3920] (StorageArchive) <5508> EV~I Event ID: 6728 Cache Statistics Report | |Process Id: 3920 |Executable: C:\Program Files (x86)\Enterprise Vault\StorageArchive.exe | |Cache Name: VaultCache |Maximum Entries: 3000 |Entry Expiry Timeout: 900 (seconds) | |Number of Entries: 162 |Elapsed: 0:0:0 (hours:minutes:seconds) |Hits: 0 |Misses: 0 |Expiries: 0 |Evictions: 0 |
67647 07:56:01.856  [3920] (StorageArchive) <5508> EV:M CStgCacheControl::ActionControlRequest Log Reset: T Cache:0
67648 07:56:01.856  [5760] (StorageRestore) <5784> EV~I Event ID: 6728 Cache Statistics Report | |Process Id: 5760

[LCT]

What version of EV are you running? and What OS are you rinning it on? Vault Cache is controlled by Policy and it's in the Desktop Policy if that is what you are asking.

I would log a case with Symantec Tech Support to get them investigate the dtrace, as it may be a new error that you have discovered.

[allanh1]

Hi its 8.0 sp5 and Windows 2008 SP2

Its not showing as an error in the event logs, its just showing as an informational, its just that its generationg 000's of events a second and filling the logs.

I was more wondering if there is a registry key or something that will increase the logging of a specific service over it actually being a problem - i just cant find anything on the website relating to it.

Thanks

Allan

[TonySterling]

What were you doing that you needed to reboot the server?

Have you been working on any issues with support?

[allanh1]

Hi - No not been working on any issues - the box has been working remarkably well for months....

It was rebooted after the installtion of the months microsoft security patches for the OS - Which i would have reverted, but we have another server thats identical, got the same patches installed, and isnt experiencing the same issues....

We also generally reboot the EV boxes weekly - bi weekly, as otherwise the memory starts to hang the processes.