03-01-2013 09:02 AM
We have EV 10.0.3 for Exchange 2007 and recently we ended up with Indexing issue on only Journal mailbox. We cannot search on Journal mailbox from December 2012. Going to Indexing on the EV console we can see 1 failed index. Indexing and searching is fine for all other users.
We recently migrated from EV 8 to 10.0.1 and this is where after a while one of he Journal indexing volume (64-bit) failed and this is the only 64 bit indexing for Journal archive.
We have tried various fixes including:
verifying and Synchronise.
Some of the event logs suggested to upgrade to EV 10.0.3 and we done the upgrade but not luck with the fix.
Symantec support suggested to use EVSVR to locate the missing items. then we applied EVSVR in report mode and then in repair mode it identified the missing items and deleted them from the indexing.
then it was suggested to rebuild the indexes (only for the failed volume) and we done that and completed the rebuilding. the failed index on the Indexing went a way for a short time then restarting the index server it brought back the failed status and showing error id 28998 and 41329 (Error Type: FrenzyErrorDetected).
I am not sure what else we need to do as I believe Symantec is running out of options here.
Any suggestions or ideas please.
thanks
Solved! Go to Solution.
04-03-2013 09:29 AM
There were two subfolders that appear to be missing in the Storage area for Enterprise Vault.
EV pointing to missing DVS files in these locations that were attempting to be indexed. The Index Service was hanging on searching for these items causing the JournalArchive table to build up with items ready to be committed to index.
RESOLUTION:
Since there were not any backups to restore the DVS Files back to this folder, the pointers in the Vault Store database were removed using the DeleteSingleSaveset procedure. Once these pointers were removed, the Journal Index Volume started to update correctly and cleared the items waiting to be indexed from the JournalArchive table of the Vault Store.
it's not known how and why these items gone missing completley despite of having backing up EV every night.
It took over three months to completly fix this issue. I hope this will not happen to anyone elae during the EV migration to 10.0.
03-01-2013 10:09 AM
From the sounds of things it seems like there might be additional missing items from the journal archive.
Is that what the events indicate?
03-02-2013 03:18 AM
Yes to add on to this, Error type indicates more missing/corrupt items. If you want quick way to get index stable, then you can use poison pill setting to ignore the failed items.
03-08-2013 08:07 AM
Thank you Guys for your responses.
I did try widening the range but still the same errors and still one index of the Journal is still failing.
As for the poison pill setting... what will actually happened to these missing items. will this change will ignore the failed items means these items will not be indexed and they will not come up when search applied in Journal archive.
Am i right to think that the index rebuilding on that specific parition will remove those items from the sql databases.
Regards,
03-08-2013 09:17 AM
Well it really depends what the frenzy failed on and what the event is.
And it also depends on what you did with the EVSVR repair, did it remove the database entries? because indexing won't remove anything from SQL, only the EVSVR will
So what would really help is
1. Paste the Event ID that caused the frenzy
2. Tell us what options you used for the EVSVR repair
3. If you can, attach the Index Rebuild report file for that user
03-10-2013 04:09 AM
03-25-2013 10:09 AM
03-25-2013 10:58 AM
This might be the issue that you are referring to in relation to 'known issue':
http://thingsilearnedtoday.net/2013/03/21/enterprise-vault-10-0-3-cumulative-hotfix-1-release/
04-03-2013 09:29 AM
There were two subfolders that appear to be missing in the Storage area for Enterprise Vault.
EV pointing to missing DVS files in these locations that were attempting to be indexed. The Index Service was hanging on searching for these items causing the JournalArchive table to build up with items ready to be committed to index.
RESOLUTION:
Since there were not any backups to restore the DVS Files back to this folder, the pointers in the Vault Store database were removed using the DeleteSingleSaveset procedure. Once these pointers were removed, the Journal Index Volume started to update correctly and cleared the items waiting to be indexed from the JournalArchive table of the Vault Store.
it's not known how and why these items gone missing completley despite of having backing up EV every night.
It took over three months to completly fix this issue. I hope this will not happen to anyone elae during the EV migration to 10.0.