SMIME-Messages cannot be archived

[Michael_Buehlme]

I see a lot of event entries (Event ID 6592) on my EV-Server (EV8 SP5). A case (414-045-362) has also been opened.

For any reason SMIME-Messages will not be archived, mostly.

I have a list of Archives (ArchiveID's) having this issue and now I would need a SQL-Query to get the MBXDisplayName correlating to the ArchiveID.

[RahulG]

Is this issue when manually archiving of the emails

check the following document

http://www.symantec.com/docs/TECH130101

[Rob_Wilcox1]

So as Rahul points out, there was a bug in 8 SP 4 Server where SMIME messages wouldn't be archived (also 9 base).. but 8 SP 5 works.

Also you say that it works against some archives and not others?

Have you got any trace?

[JesusWept3]

just an fyi, the query would be  something like

 USE EnterpriseVaultDirectory
SELECT A.ArchiveName "Archive Name", 
       R.VaultEntryId "Archive ID"
FROM   Archive A, 
       Root R
WHERE  R.RootIdentity = A.RootIdentity
  AND R.VaultEntryId IN 
     ('15BA9E0B6128AF246B84CB2BA4856B0641110000archiveNUE',
      '15C28EFC4FCBD634E858596AAFD6DC4971110000archiveNUE',
      '146379056462AD740914031171F5AB4151110000archiveNUE',
      '1CE8974310054824F81C5709D1DAE85681110000archiveNUE',
      '15070EA0E604106408DF4345D5F9C4BB51110000archiveNUE',
      '14D8AE2B8CC387D4DA900872E888AB3711110000archiveNUE',
      '16F7599F34BFE3F4AB42713C584962C581110000archiveNUE',
      '1CEB73940BBF2434C87E0FB8F27FD89A91110000archiveNUE',
      '18416539BB90C6E4EB8054C874453988E1110000archiveNUE',
      '131CEBCF6B26F3D4C8E09B743254CE8BC1110000archiveNUE')

[AndrewB]

Hi Michael,

Were you able to resolve this issue?

[Michael_Buehlme]

Hello guys.

I could not solve this issue. For the moment I have added message class "IPM.NOTE.SMIME*" and disabled this message class for the archiving process.

[Rob_Wilcox1]

Were you not able to get the trace requested?

[Michael_Buehlme]

Can you provide me the trace options (id) for this dtrace?

[Rob_Wilcox1]

Can I ask if you are manually archiving, and seeing failures, or only during the regular archiving run?  If manual are you using the full or HTTP clients?

Normally I'd go for :-

Mailbox Archiving issues in the VAC.

Which is :

set ArchiveTask v

set AgentClientBroker v

set StorageArchive v

set w3wp v

That kinda covers all bases, but is likely to produce a large log file if capturing a full scheduled task.. hence it's "good" if you can reproduce the issue with manual archiving... because then the trace file will be much smaller.

Hope that helps, if not shout out more questions.

[Michael_Buehlme]

Hello Rob

Here the log. HTH

[Michael_Buehlme]

Hello Rob.

Did you had time to analyze the log?

[Rob_Wilcox1]

I apologise I hadn't seen the update to the forum post..  Let me have a look now.

[Rob_Wilcox1]

First of all just checking your versions ...

From the botton of the dtrace, it does look everything is on order at 8.0.5.1048, which is 8 SP 5.

Was this manual archiving?  As I can see that you have the policies set to exclude SMIME at the moment (which I think you mentioned in an earlier post) :

13462 11:33:07.189 [10532] (ArchiveTask) <5464> EV:M CMessageClassPolicy::PopulateFromExchangePolicyEntryId - Read MessageClass [IPM.Post*] [10B78A7960AD5504F93021F0B9532C94B1012700archiveNUE] [INC]

13463 11:33:07.189 [10532] (ArchiveTask) <5464> EV:M CMessageClassPolicy::PopulateFromExchangePolicyEntryId - Read MessageClass [IPM.Note.SMIME*] [10B78A7960AD5504F93021F0B9532C94B1012700archiveNUE] [EXC]

13464 11:33:07.189 [10532] (ArchiveTask) <5464> EV:M CMessageClassPolicy::PopulateFromExchangePolicyEntryId - Read MessageClass [IPM.Note*] [10B78A7960AD5504F93021F0B9532C94B1012700archiveNUE] [INC]

[EXC] -> shows the policy has that message class excluded

[INC] -> shows the policy has that message class included

Looks like the error is here though :

178585 11:36:50.321 [12132] (StorageArchive) <6284> EV~E Event ID: 6786 Error storing Saveset in EMC Centera Clip |Reason:     A disk error occurred during a write operation.  [0x8003001d] |Saveset Id: 201109145992995~201002080536230000~Z~60926414D760997F1650587A62080001 |

165353 11:36:31.414 [7712] (StorageArchive) <9244> EV~E Event ID: 6592 Abnormal error occurred | |VaultId:   16F7599F34BFE3F4AB42713C584962C581110000archiveNUE |Reference: GOPV/dt |

Do you have a sample trace, of manually archiving an item, which isn't SMIME which does work?