I am very new to the Enterprise realm, so I might have some sill questions. Here is the problem. Have Enterprise vault that the services keep stopping because the drive its on is full. (under 6GB vault services stop) So my task is to clean up the vault. It appears the vault size currently is around 550GB. Looking at the mailboxes, it don't seem possible. So I have seen some Exchange Journals that are really large in size, However, there isnt a way to export them that I can find like a mailbox. Any ideas? Next, there are some mailboxes that I can see that I want to export then remove, BUT the services stop before I can accomplish this, thus the export fails. How can I keep the services on long enough for an export? I also believe there is a TON of archiving waiting to be done, as the other day I cleaned up some and had almost 10gb free, then it just filled right back up so far, that now its stuck here, where I can't do anything. I found a way to turn off the monitoring so the services might run for awhile, BUT if I do that and it totally fills the drive, I am up the creek. If I can remove some of the journals(110GB and 70GB in size) this will help a lot. If I do remove or move them, how can I get them back incase I ever need to? Thank!!
Wow, I am lost...haha...First, how/where do I put the tasks into manual mode? Next, when you say a "temp move" of some data, are you meaning mailboxes and such? The only actual data on the drive itself is sql and moving it isn't REALLY simple....and then I would ask, where do I change the retention policies at? The main problem is, the services are active for about 15-20 seconds before they all drop, so I dont have time to look at anything or do much at all before I get errors.
Exchange Journals is basically every email sent or received to a user who's mail store is being journaled has a copy of the sent or received email sent to a journal mailbox.
In EV you have a Journaling task. This task looks to the Journal mailbox, downloads the emails from the Journal Mailbox and then loads them into the archive
The only way to free up space on journaled mailboxes is to expire the data
Journaling is turned on because a company need to track all outgoing and all incoming emails for either compliance or legal reasons. Unless you have lots of storage you need to expire the data from a journal store regularly unless you have some legal or compliance reason to retain forever.
This you need to discuss with management to make a decision on how long you actually need to keep this data.
Well that may change Now, our company was just purchased by a private company, so no more uhhhhhhhhh red tape for SOX...can you tell me how where to check and see what the settings are for the journaled mailboxes to expire?
You can find this in the Enterprise Vault Console
Expand Policies, then click on Retention Categories
Pick out the journaling retention category from the list on the right and select properties of that item
You may be using a custom one or one of the default categories but normally most create a new specific category for the company and name it journal or something like that In there you can see the day or years it is set to. If the tick box for keep forever is enabled then nothing every gets deleted from the archives
Yup, just messaged you...but basically, got a journal mailbox exported to pst(3days, 70gb worth), then deleted the mailbox and the exchange journal entry, but the drive space hasn't changed.....what else do I need to do?
The space on your EV server has nothing to do with your journal mailbox
Whats happening now is that all your exchange servers which were journaling to your journal mailbox are building a queue of email to be sent to your journal mailbox. or if you turned of journaling on them you are no longer compliant with the companies needs to capture all the emails send and received
You were to talk to your management to either get more storage or set a lower expiry date on the data in the archive.
By setting the lower expiry date and running expiry you would have deleted old data and made space for new data. Or by adding new disk you would have the ability to clear your journal backlog and gotten the system under control
If you did what i think you did... and i pray you did not. My recommendation is get the help of EV support to get everything back in place, get EV training ASAP or bring in external EV engineering to help you fix the issue.
I can talk you through it on here but it will take forever. I thought I explaind it well enough.
Are you in the USA? I will send you a Private Message please read it now
So your saying, anytime you remove any mailboxes from the vault that it won't free up any disk space? The company WILL NOT spend a dime on upgrading or getting consultants at this point and the journal I removed was out that hadn't been touched since 2006. Plus, it was pushed out to .psts so anything removed or deleted can be restored.
removing the mailbox is not what frees up space, expiring data from the archive frees up space
When you export data from an archive as a backup and then exiire the data in the archive, the contents of the database are removed and also the indexes, so will the actual files that were archived but you need to follow a process to do this.
You did a backup of the archive...well thats what it sounds like you did
Identify the index locations for the journal in the VAC
Next in the VAC you need to delete the archive
When this is complete any enteries in SQL and also the storage it used should be erased also
You may need to delete the directories for the archived data and indexes. The SQL database for this archive will also need to be deleted