Enterprise Vault archives manually, but archiving task isn't working.

[Suporte_GP]

I have the EV Version 10.0.0.1316, Exchange 2010 SP2, both running on Windows 2008 R2 Enterprise SP1. Clients are using Outlook 2010.

If I try to archive an item manually, using the buttons on Outlook ribbon, it works fine.

I've configured the MB policy to archive items based on age, when they are older than 1 month, with no override settings.

Messages older than 1 month are not being archived. Logs gives no clues.

Any ideas?

Caio.

[TonySterling]

Can you do a run now in report mode to see what that says?

Also, have you verified are not in backup mode when your schedule is running?

[Suporte_GP]

System Name

Mailbox name

Associated account

Mailbox state

Date

Start time

End time

No of archivable items

Total size of archivable items

No of archivable folders

No of items ready to archive

Size of items ready to archive

No of large items

Total size of large items

No of messages that would be archived Size of messages that would be archived

Quota limit

Quota used % of 

Quota free

Space held by existing pending items

Average size of shortcut (kB)

No of Expired Shortcuts

No of Orphaned Shortcuts

No of Old Shortcuts

No of Folders containing moved items

No of moved items identified

Archiving policy applied

*** SERVERNAME ***

*** CN of User ***

*** AD username ***

Enabled

4/25/2013

12:34:06 PM

12:34:14 PM

4

11

53

0

0

0

0

0

0

1203200

814125

32.34

Not Calculated

3.323

0

0

0

0

0

Default Exchange Mailbox Policy

About the schedule, my task also run at 12pm. And if I run manually, it should archive it, right?

[Rob_Wilcox1]

You have only 4 eligble items... and 0 of them will be archived.

Do you have 'archive unread items' enabled in your policy? Perhaps that is what is preventing the policy in applying.  Best bet = screenshots.

[Suporte_GP]

Yes, the option to archive Unread items is applied. Should I uncheck the option?

[TonySterling]

No, it simply appears there aren't any eligible items.  You have not by chance restored all the items to the mailbox have you?

If yes, you would need use IgnoreEVDates registry key. 

Next step would be to find the biggest mailbox and do a run now against it to see what happens.  You could also run a dtrace to see what it says.

Regard,

[Suporte_GP]

No, I don't.

I'm running a DTrace on select mailbox right now.

Edit: Sorry, but what this IgnoreEVDates Key does? I see there are four options: 

0 = Off
1 = Ignore Archived date
2 = Ignore Restored date
3 = Ignore both Archived and Restored date

[Rob_Wilcox1]

The IgnoreEVDates key only comes in to play if you have restored a bunch of data back to the mailbox and now want to rearchive it.

Have you done that?

[Rob_Wilcox1]

A few questions:

- which folder are the items in which you think should be archived but aren't?

- The above screenshot showed that 'archive unread' was selected, but, was that a recent change, as all the folders in that trace say that otherwise:

543 14:42:53.083 [168] (ArchiveTask) <3900> EV:M EFP - Folder Policy Settings for [Inbox]|  Filter Type = Using users default policy|  Archive Settings Locked = TRUE|  Override Locks = FALSE|  Delete Original = TRUE [LOCKED]|  Create Shortcut = TRUE [LOCKED]|  Archive unread items = FALSE [LOCKED]|  Archiving based on : Age [LOCKED]|  Age Based Period 1 Months|  Not using Size Priority Settings

I can see a ton of shortcut processing, but only one check to IsEligibleForArchive (and that results in the item being marked as non-archivable, because it is a draft):

26575 14:42:54.534 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::IsEligibleForArchive(/o=GP/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Edison Yamamura) |The message titled: CV Wellington will not be archived as it is Unsent  |

26576 14:42:54.534 [168] (ArchiveTask) <3900> EV:H :CArchivingAgent::IsEligibleForArchive() |Exiting routine |

[Suporte_GP]

1.) The folder is Inbox. I have an email from 03/10/2012, as an example.

2.) I've unchecked for a test only. But I've already checked again.

About your comment regarding shortcut processing and eligible for archiving, is it something with the configuration?

[Rob_Wilcox1]

1/ What is the subject of the mail?

2/ Well, this mail you're referring to .. is it a read or unread item?

[Rob_Wilcox1]

And unfortunately :

---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115550 to 115553 *****

115554 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date

---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115555 to 115564 *****

115565 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T

---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115566 to 115574 *****

115575 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'Re: Good nao estah atualizando os emails do meu inbox. Parou no dia 11/9!', size 3423 bytes

---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115576 to 115584 *****

Were you doing a MON when running DTRACE so that you could see the progress to the screen?

[Suporte_GP]

1.) FW: GP Investments - voice calls

2.) It's a read item.

Edit: Sorry, but what is MON?

[TonySterling]

So most likely you need to add the messageclass for voicemails.  That is probably why they aren't archiving.

See this post:

https://www-secure.symantec.com/connect/forums/archiving-voice-mails#comment-5612121

[Suporte_GP]

Tony, that's just the subject of the message. It's a regular outlook message item.

[Rob_Wilcox1]

MON is what you can type in to a DTRACE window to monitor the output on screen. If you didn't run DTRACE from a command prompt then you won't know that.

There are two entries for GP Investments - voice calls.

One is RE

145529 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'Re: GP Investments - voice calls', size 3484 bytes

145530 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - shortcutexpiryperiod 1, deleteexpireditems F, orphanedshortcut T

145531 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T

145532 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date

145533 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12931} retention category matches [True]

145534 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12953} archive folder id matches [True]

145535 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12979} item has moved [False]

145536 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - 'Re: GP Investments - voice calls' has not moved so do checks to see if it is eligible for shortcut deletion

145537 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::ThinOrphanedShortcutCheck:#13232} Entry

145538 14:42:59.541 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::ProcessChunkOfShortcuts() |The shortcut titled: Re: GP Investments - voice calls will not be deleted |

One is on it's own:

145709 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'GP Investments - voice calls', size 2862 bytes

145710 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - shortcutexpiryperiod 1, deleteexpireditems F, orphanedshortcut T

145711 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T

145712 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date

145713 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12931} retention category matches [True]

145714 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12953} archive folder id matches [True]

145715 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12979} item has moved [False]

145716 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - 'GP Investments - voice calls' has not moved so do checks to see if it is eligible for shortcut deletion

145717 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::ThinOrphanedShortcutCheck:#13232} Entry

145718 14:42:59.557 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::ProcessChunkOfShortcuts() |The shortcut titled: GP Investments - voice calls will not be deleted |

There is no processing of FW: GP Investments - voice calls

It could be a difference in service pack, but your trace is a lot different to my 10.0.2 server.  To start with I don't see any : 'Processing msgs in folder' entries in your trace, and I do in mine, even when I run in report mode.

How did you run the task, when you did the trace?

[Rob_Wilcox1 · Accepted solution]

Can you add the message class column to Outlook...  and confirm what it is, and share a screenshot of your message classes tab on your policy?

[Suporte_GP]

Hm, Rob, interesting. Didn't know I'm able to check the message class from Outlook. I've added the fields to EV, and now in report mode I have a different status, even though isn't working yet on clients.

System Name Mailbox name Associated account Mailbox state Date Start time End time No of archivable items Total size of archivable items No of archivable folders No of items ready to archive Size of items ready to archive No of large items Total size of large items No of messages that would be archived Size of messages that would be archived Quota limit Quota used % of Quota free Space held by existing pending items Average size of shortcut (kB) No of Expired Shortcuts No of Orphaned Shortcuts No of Old Shortcuts No of Folders containing moved items No of moved items identified Archiving policy applied

*SERVER NAME* *CN of the user* *Username* Enabled 4/25/2013 5:00:59 PM 5:01:11 PM 379 145567 46 16 7820 0 0 16 7820 Undefined 381626 Undefined Not Calculated 3.433 0 0 0 0 0 Default Exchange Mailbox Policy

Edit: About the trace, I've added the trace from Advanced Features, created a new trace from Mailbox archiving issues, and given a random name to it.

[Rob_Wilcox1]

No of archivable items : 379

Total size of archivable items : 145567

No of archivable folders : 46

No of items ready to archive: 16

So you now have 16 items ready to archive..

What message class was the item that you mentioned earlier? What did you have to add to the message classes tab?

And you probably need to gather another DTRACE unless you now have an understanding of what is happening, and are okay?

[TonySterling]

To add the message class field in Outlook do this:

1. Right-click the column-header in the view, and then click Field Chooser on the shortcut menu.
2. In the Field Chooser list, click to select All Message Fields.
3. Drag the Message Class field to the view column-header to add the field as a column.