Event ID 8392

[AndrewB]

Can't find anything about this specific error. Hoping the EV gurus here can help. I upgraded over the weekend from EV 7.5.5 to 8.0.1 and applied this hotfix http://seer.entsupport.symantec.com/docs/325300.htm two days ago. We're archiving from Exchange 2007 SP1.

Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 8392
Date: 7/17/2009
Time: 8:34:31 AM
User: N/A
Computer: NTM026
Description:
The EnterpriseVault.DirectoryVault object reported an error.

A call to the system function SafeArrayGetElement() failed with

The parameter is incorrect.


Internal reference: GAV

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp

Event Type: Error
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 8392
Date: 7/17/2009
Time: 8:34:31 AM
User: N/A
Computer: NTM026
Description:
The EnterpriseVault.DirectoryVault object reported an error.

An attempt to retrieve an attribute value has failed. Attribute supplied ArchiveVEID.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp

[Maverik]

Not seen this error before but can you get a dtrace of archiving task when the error occurs and post it.

[AndrewB]

since i cant reproduce the error at will, i'll have to run the dtrace and keep an eye out for these events. how would i use the trigger or filter option to help manage what's logged and keep the information relevant?

[Maverik]

There is a technote on setting a trigger dtrace. Look on the support site http://support. Veritas.Com. Would get for you and put the link here but not easy on a iPhone:-)

[Rob_Wilcox1]

It maybe an invalid ArchiveVEID ... which might also be why you don't see it regularly.  A dtrace trigger is the best option at this time, I think.

[Faxson · Accepted solution]

I came across this recently.  My solution was to ZAP the user.  As it was in test I also deleted the archive (Not sure if this was necessary).  After enabling all was OK.

While I saw the problem the archiveFolderView (in the directory) was empty for the user.  After the zap and re-enable there were a couple on entries for the user.

Ben
..

[MichelZ]

There's a TechNote which is similar, maybe it points someone to the right direction... ;)

http://seer.entsupport.symantec.com/docs/292525.htm

Cheers

[AndrewB]

You're right. I ended up having to ZAP the user. Kudos.