Strange collection issue/partition issue

[FreKac2]

Hi all,

Due to some events in the event log, stating that a collection was not found.

Anyway I couldn't find the cab file and the cab file/s were not in the backups up either (6 month retention).

So I started an EVSVR run just to verify how much and which items may be missing and a bunch of errors get generated in the log.

E.g.

SavesetId: 200911300000000~200807031353140000~Z~A0F28DA3ABB72D67F116CB2406F9DDD1, Archived Date: 2009-11-30 09:49:00Z
ArchiveEntryId: 1E1802C2DB2029E4E9FC764C04F233D681110000evserver
Collection Identity: 21964, DVS RelativeFileName: 2011\01-25\A\Collection21964.CAB
File not found [0x80070002]
Event Output: Failed to recall a Saveset from its Collection.     Reason: The system cannot find the file specified.  [0x80070002]   Relative Saveset Filename: 2009\11-30\A\0F2\A0F28DA3ABB72D67F116CB2406F9DDD1.DVS

What I find strange is the Relative Saveset Filename Path vs. the collection file path.

If I go to collection file path it does exist and I can open and I do find the saveset in there.

Also if I look at the events in the event log (not the same saveset though):

Relative Saveset Filename: 2009\11-30\9\6DB\96DB75D69185467A91B7E7F7429916E0.DVS

Relative Collection Filename: 2009\11-30\9\Collection21957.cab

PartitionEntryID: 1EB08704351E4B1468740B198613EBB951q10000evserver

PartitionGUID: EB08704351E4B1468740B198613EBB95

Partition Root Path: D:\Enterprise Vault Stores\MBXStore Ptn1

Secondary Location:

Migrated File Id:

Reference: NSDR/LMF

I then did a search in the partition and found the cab file but in 2011\01-25\9 folder and I can open the cab file and the saveset in the event do exist in the cab file.

Have no idea what has happened here or if it's a problem, e.g. if the event is generated but EV have some record of the alternate path ?

Really weird to me though, so if anyone got any ideas I'll appreciate it.

Will log a case otherwise.

Cheers

Fredrik

[TonySterling]

Hi ya,

What version of EV are you now?  I know there were some hotfixes for EVSVR due to some issues with collections from version prior to EV 8. 

Tony

[FreKac2]

The current version is EV9.0 but the EV environment started at EV8 SP?

The EV installation was moved/migrated to a w2k8 r2 environment and the old server is gone, so I can't see the exact install/upgrade history.

But customer started at version 8.

I have started a support case so I'll see what they say (they are currently looking at the evsvr log).

[TonySterling]

Just looked again at the file paths and yes, those are for the EV 8 version, sorry about the false lead.  I really shouldn't post without coffee first. 

I was going to recommend pinging support so that is a good thing.

[FreKac2]

Hehe, no problem, coffee the glue to everything :)

[JesusWept3 · Accepted solution]

its a known issue, fixed in EV10 supposedly

[JesusWept3]

http://www.symantec.com/business/support/index?page=content&id=TECH146514

[FreKac2]

JW2, it looks similar but not quite, may be related though but there are two issues in play.

One were the cab do exist in the correct location but EV can't open the saveset.

The second is in regard to cab files being in the "wrong" location.

The second problem seem to be a mismatch between the DB entries and the locations of the cab files.

E.g. EV tries to open a cab file located under 2009\11-30\9 but the cab file is under 2011\01-25\9 (or similar).

We tried to copy the cab file to the 2009\11-30\9 folder and then tried the dump saveset from EVSVR without success.

[JesusWept3]

oh jesus, i had this EXACT same issue :\
Have them cross reference case #413-543-344

[FreKac2]

Will do, saw your PM, will mail back.

/Fredrik