cancel
Showing results for 
Search instead for 
Did you mean: 

Risk Analysis for Enterprise Vault not working

kkoenen
Level 3

I'm looking for a whitepaper / formula / quicksheet about the following;

 

What is the risk (Chance * Impact) of the Enterprise Vault failing (not picking up an email and storing it in archive).

 

Impact might be derived from mails a day, percentage of business critical, number of users?


Secondly, I would like to know if we could set up some kind of warning signal if Symantec Vault for whatever reason, misses an email.

 

Regards,

 

Kees.

12 REPLIES 12

kkoenen
Level 3

kkoenen
Level 3

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

Hello Kkoenen,

If mails are not being archived, you will notice in exchange. Mailboxes will grow in size (depending obviously on amount of mail coming in daily). EV has monitoring and auditing and reporting (all optional)

Reporting has a report called 'items archived per hour' which will show you how much is archived during the archiving window. If archiving fails, this shows 0... Additionally, EV comes with a scom-pack, which can help monitoring. If an email is not archived, you might see this in eventlog (corruption is a cause of an email not being archived)

Regards. Gertjan

kkoenen
Level 3

I believe our implementation saves all received email in the vault. Might it be possible to compare exchange inbox items that came in today to the items stored to the vault today? We would then have a deviation report showing zero deviations when all works as designed...

Rob_Wilcox1
Level 6
Partner

kkoenen,

 

The problem with your suggestion is what if I delete 8 emails today.. they came in today, but tonight when archiving runs it'll be "less" those 8 items.

 

Your sort of idea would be better placed around the journaling area, which is where Exchange comes in to play more than ever..  and you'll see journaling issues by a build of mails in the journal mailbox(es) or a bunch of messages in one of the failure folders.

Working for cloudficient.com

GertjanA
Moderator
Moderator
Partner    VIP    Accredited Certified

If you want to capture all email (in and out, in- and external) setup a journal mailbox, do journal archiving.

If you use journal archiving, it does not matter that users delete mail from their inbox before these are being archived.

Regards. Gertjan

kkoenen
Level 3

GertjanA, thanks! But now.. the second step; how do I create certainty (deviation report?) showing that indeed ALL mails were archived in the journal?? ie there was no mail skipped due to whatever reason.

Liam_Finn1
Level 6
Employee Accredited Certified

You would watch the Journal Mailbox. Only after the archiving process completes does the email get removed from the Journal Mailbox.

 

If for some reason EV stopped Journaling then there would be a buildup of emails in the Journal mailbox and that you can monitor via a WMI call or using something SCIM or SMS or set thresholds on the mailbox in Exchange

Rob_Wilcox1
Level 6
Partner

And if the question then  becomes "how do I know all mail landed in the journal mailbox?" Your port of call then becomes Microsoft to find out if there is a way of affirming that all mail sent/received did in fact arrive in the journal mailbox.

Working for cloudficient.com

MichelZ
Level 6
Partner Accredited Certified

Hi

Just to make sure that we are talking apples and not oranges:

- You are using Exchange Journaling

- You are using Enterprise Vault Journaling to manage the Exchange Journal Mailboxes

Is this correct?

 


cloudficient - EV Migration, creators of EVComplete.

kkoenen
Level 3

Yes, that is indeed my understanding (technical staff working on this, i'm just the processes guy and did a quick check on possibilities within Symantec system).

 

The thing we need is *proof* that ALL email is being journaled and transfered to the enterprise vault ie there is NO email that is not journaled.

 

BTW.. I gave the tech. specialist this link ;)

Thnx!

Rob_Wilcox1
Level 6
Partner

Hope it helps, and if you get feedback from Microsoft on the journaling-proof it would be great to share that with everyone.

Working for cloudficient.com