When the users send mails with attachs like doc, pdf or jpg biggest than 5MB all journal task and storage service stop with the error:
Event Type:Error Event Source:Enterprise Vault Event Category:Journal Task Event ID:6197 Date:29/01/2007 Time:02:02:37 p.m. User:N/A Computer:KVSSERVER Description: Error occurred when sending a message There are insufficient resources to perform this operation.
If i start the services (Task and Storage) show the same error in the event log and Stop it. The services wont start until that i move manually the mail with the attach to other folder inside journal mailbox.
Have you tried http://support.veritas.com/docs/273280 ? This suggests a few possible causes and solutions
From the techdoc
- This issue may occur when many Message Queueing clients connect to Message Queueing server at the same time. This causes an accumulation of Transmission Control Protocol (TCP) buffers in the kernel pool memory. This TCP buffer pool memory accumulation is the result of many outstanding messages that are not promptly processed by Message Queuing server.
- This issue may occur when there is a version mismatch between certain files that Message Queueing requires.
- This issue could also be due to corrupted EV binaries.
I think EV is getting this error back from MSMQ. Check the support.veritas.com I'm pretty sure there is a technote discussing a couple of registry keys you can set for MSMQ. Something like PagedPoolSize,KernelMemThreshold I seem to remember