Is there an event generated for failed items in an index volume?

[goatboy]

We get failed items every so often in index volumes, is there an event logged in the EV or Application event logs? I can't seem to find it.

I found a nice SQL query here:

https://www-secure.symantec.com/connect/articles/enterprise-vault-useful-sql-queries

Select IndexRootPathEntryId, FolderName, FailedItems from IndexVolume
Where FailedItems > '0'
order by faileditems desc

But obviously easier if this information already gets logged somewhere.

The driver for the above is to set up an alert when there are failed items in an index.

Thanks!

[Chris_Warren]

There are a couple of events that can get generated in the Enterprise Vault Event log.

Examples:

7284's - Failed to add item to the index due to failure loading the item's index metadata.
7288's - Addition of item to index abandoned.
7290's - Deletion of item from index abandoned.
7291's - Index update abandoned.

Those are a few I can think of.

[goatboy]

The 7288 ID - would that correspond to a failed item in an index, when looking at the index properties in the VAC? I need something to monitor for to alert us when there are failed items in an index. Do I need to monitor for the other events as well? Will they also result in failed items appearing in the index properties in the VAC? Thanks.

[JesusWept3 · Accepted solution]

7288 would probably be the one to monitor, however your best bet would be through sql queries against the IndexVolume tale