We have a client that is currently journaling and everything is working correctly as far as archiving the item and removing the item from the journal mailbox.
But the strange part is that if you do a search in the journal archive we cannot search past the year 2008. the stranger part is that if you look at the indexes in the archive propertise it only goes up to 2008. Now the client is writing to a Data Domain directly, so it is not writing to a attached disk and then migrating it to the Data Domain.
The version of EV is 8.0.3
Server 2003 r2 SP2
I will definitely look into the journal archive indexes and confirm the ranges on the volumes. I will also look for any failed volumes as well. If you have storage expiry enabled, you might need to review the retention category applied to the journal mailbox. For instance, if the retention is 5 years, all the archived data older than 5 years should be already deleted by storage expiry.
Hope this help !!
Thanks for the reply. OK the problem is that I can search for information from 2000 to 2008. So from 2008 onwards we cannot search.
No indexes have failed or offline. Storage expiry is not enabled. I have never seen this happen before so I am totally puzzled by this.
There is a warning that their are indexes waiting to be replicated or backed up but it is not enough items to explain why year 2009 to 2013 are missing.
How many journal mailboxes do you have? Is there any chance that a new journal archive or mailbox was created back on 2008 on Enterprise Vault? Based on what you are saying, it appears that Enterprise Vault is storing the emails from the journal mailbox in a different archive.
I also thought that might be the case. Currently they have two journal mailboxes. If I check the settings under targets->domain->exchange->journal they are poitning to the correct archive.
Not sure when it was created
If the youngest item archived date is 18/05/2008, EV is not archiving any new data on that archive which might explain why you cannot search past the year 2008.
You mentioned that this customer has two journal mailboxes. Could you please post screenshots of the journal mailboxes properties and the journal archives under Archives > Exchange Journal?
Tried that but when I open up the journal mailbox non of te EV buttons appear and if I try and open it on a users machine it points to the users archive.I did confirm that it is pointing to the correct archive by running a dtrace against it.
From the Dtrace I pickup streaming errors to the Fingerprint and SIS. We checked the SQL and the databases indexes have not had mainteace done to it for a very long time. The task kept failing. so we are kicking of the reindexing of the databases this weekend. Could this be the problem?
What I did do was create a new archive for the journaling and pointed the new data to it. Once it started archiving i could see the new dates in the inedexes. but when I go back to the older archive the indexes are still missing. I kicked of a repair on the old indexes but I dont think it is going to resolve the problem.
Any other ideas you guys can think of?