Duplicate Email in Outlook after Legal Hold activation
Hi everyone, I have a big issue with my Enterprise Vault infrastructure. Last week, i activated the Legal hold on several mailboxes. (Using this answer :https://www-secure.symantec.com/connect/forums/litigation-hold-procedure) During the week-end, the database has grown a lot... and every items in users mailboxes got duplicated. (Email, Calendar items, etc...) In another thread (this onehttps://www-secure.symantec.com/connect/forums/getting-duplicate-emails-when-trying-archive-emails-outlook), it's said that that kind of thing happen when no option are selected in the policy. My purpose was to set legal hold on several mailboxes and "don't touch" the original.(it seems to worked... before i discover the duplicate items) Can anyone help me before i contact the support ? Does someone know a way to eliminate the duplicate and get back to normal ? ThanksSolved1.6KViews0likes7CommentsMailboxes won't archive as all item are ineligible
Hello I have an issue which is a bit odd. i have a 90 day archive policy and a 90 day with 90days of short cuts policythatboth work prefectly however. we need to clear down some users to 60 days and some disabled users to1 dayand removal of all short cuts. i created a new policy and a new provisioning group for both groups of users and then added test users into the group and left it to run for a few days. after a couple of days i noticed the test users hadn't archived. upon investigation i have discovered that archive server is reporting that the test box is uptodate as all mails are ineligible for Archiving and we always be ineligble for archive. my first thought was that i had missed something in the archivable items but it's the same as the working policy. i've double check the policies and they are the same except for the 2 months instead of 3 month. and short cut deletion policy. i've now re created the policy and reprovisioned the userand get the same result. any advise would be great as i'm at a loss. for reference i found the information in the archive report for the exchange server under Items Ineligible under policy. thanks in advance Michael1.3KViews0likes3CommentsArchiving status = Warning:failed to process mailbox
Hi, I have problems with 4 users mailboxes for other hunders there isn't any problem. In Enterprise Vault their archived mailboxes are empty. There are warnings in Archiving reports that users mailboxes' couldn't be archived and the warning is : Archiving status = "Warning:failed to process mailbox". - There isn't any problem in Deployment Scanner. - Operating System Name Windows 2008 R2 Server Standard (full installation) Service Pack 1 64-bit - SQL 2014 version:12.0.4213.0 - Enterprise Vault Version : 11.0.1.3474 - CHF Version 11.0.1.3683 In Dtrace there are some erors it can be related or not: 2479 10:22:23.628 [5376] (StorageArchive) <5736> EV:H Error MAPI_E_NOT_ENOUGH_MEMORY (0x8007000E): Attempting to read the property into a stream... 2480 10:22:23.628 [5376] (StorageArchive) <5728> EV:L The correct propTag value [0x10100003] is different from the dwAlignPad value [0x00000000] 2481 10:22:23.628 [5376] (StorageArchive) <5720> EV:L The correct propTag value [0x10100003] is different from the dwAlignPad value [0x00000000] 2482 10:22:23.628 [5376] (StorageArchive) <5724> EV:H Error MAPI_E_NOT_ENOUGH_MEMORY (0x8007000E): Attempting to read the property into a stream... 4452 10:22:23.691 [5376] (StorageArchive) <5728> EV:H {WriteSavesetCommand::Execute:#98} _com_error exception: [The system cannot find the path specified. (0x80070003)] 4453 10:22:23.691 [5376] (StorageArchive) <5740> EV:L {CSavesetSISData::GetSavesetIdentifier} (Exit) Status: [Success] 4454 10:22:23.691 [5376] (StorageArchive) <5728> EV:L {WriteSavesetCommand::Execute} (Exit) Status: [The system cannot find the path specified. (0x80070003) (anticipated err may not indicate an issue)] 4455 10:22:23.691 [5376] (StorageArchive) <5740> EV:L {CSaveset2::get_VaultId} (Entry) 4456 10:22:23.691 [5376] (StorageArchive) <5728> EV:L {EVCommandExecutor::ExecuteRecoverWithRetry} (Entry) 4457 10:22:23.691 [5376] (StorageArchive) <5740> EV:L {CSavesetOnIStg::get_VaultId} (Entry) 7040 10:22:29.619 [35632] (ArchiveTask) <6464> EV:H :AgentMessageDispenser::ProcessMessages() |Exiting routine |For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3683&error=V-437-2429 7041 10:22:29.619 [35632] (ArchiveTask) <18324> EV:H :CAgentSchedule::ProcessSchedule() |The scheduler is shutting down. |For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3683&error=V-437-2399 7042 10:22:29.619 [35632] (ArchiveTask) <10092> EV:L {AgentMessageDispenser::ThreadDeInitialise} (Entry) 7589 10:22:29.743 [35632] (ArchiveTask) <30792> EV:L MSMQ Nack Message Handler for Archive Agent Admin Queue stopped |For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3683&error=V-437-6423 7590 10:22:29.743 [35632] (ArchiveTask) <30792> EV:L {CQueue::~CQueue} (Entry) Here is another Dtrace log: 4769667 10:23:39.803 [24624] (ArchiveTask) <23076> EV:H 23076:ServiceMain() |Creating entries for all this agents queues |For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3683&error=V-437-2321 4769668 10:23:39.803 [24624] (ArchiveTask) <23076> EV:H 23076:ServiceMain() |Ensure that all required queues are available and usable |For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3683&error=V-437-2322 Thank you,3.4KViews0likes2CommentsEvent 3487 - The mailbox will not be processed again on this archiving run because there were errors with too many individual items.
Hi guys, i have one problem with out Ev 11 server. Each night start the archiving task on 2 exchange 2013 server. the morning , in the event viewer, it's logged the warning with EVENT 3487 The mailbox will not be processed again on this archiving run because there were errors with too many individual items. and the link to find more info is broken. For more information, see Help and Support Center at http://entced.symantec.com/entt?product=ev&language=english&version=11.0.1.0&build=11.0.1.3527&error=V-437-3487 Do you can help me to find web page with more informations about whis warning ? Best Regards. Marco3.5KViews0likes12CommentsSQL Query to find out list of Orphaned Archives
Hi, Need help in creating a SQL Query to find out which all Archives in the Vault Stores are currently orphaned. Users have been removed from the EV Environment, but the Archives are stiill present. Hence need to delete those Archives. Looking for a SQL Query that will point in that direction.557Views0likes1CommentThrottling In Exchange 2013
EV 10.0.4 HF3 Mixed environment Exchange 2010 and Exchange 2013 OS: windows server 2012 enterprise R2 I'm trying to move journaling over to new Exchange2013 databases/journaling mailboxes running on dedicated servers. Whenever I make the journalrecipient switch messages start to backup in the delivery queues stating the thread limit has been exceeded. I've tried putting the following keys on the EdgeTransport.exe.config but no dice. I've also made sure the throttling policyapplied tothe EV system mailbox was set properly. <add key=”RecipientThreadLimit” value=”2″ /> <add key=”MaxMailboxDeliveryPerMdbConnections” value=”3″ /> I don't have this issue while running on the Exchange 2010 databases/jailboxes,has anyone ran into this throttling issue before?7.8KViews0likes13CommentsIndexing not working in Enterprise Vault 11
Hi all, I am pretty new to Enterprise Vault and I am learning about it. Currently I have a very big problem in our environment. Indexing is not working. Wehave two servers for indexing. Both are in a Index Server Group. In that, one server has been completely taken out from the environment. The other one is still running. I am not able to delete the server which is taken out from the environment from the administration console. When I delete it, I get the error message The computer contains Services. You need to delete all these Services before you can delete the Computer. When I tried to delete the Services - I get the error message : "Could not determine if the Enterprise Vault Server running on (server name) is part of a cluster. No such host is known. When I tried to delete the task associated with that server I get the error message : "The task cannot be deleted because there are indexing operations associated with this task. I checked completely and I don't see any indexing task associated with that server. Event IDs that I get stating indexing is not working are : 41021, 41008, 41011, 41291, 41259 I searched online, but it doesn't give me a correct path to troubleshoot. My Questions : 1. Should all the servers in the Indexing Server Group should be in working condition ?? 2. If not, the another server is still running, but all the indexing jobs are struck and not moving. Environment Information. EV Archiving Server Windows 2008 R2 Standard Service Pack 1 Enterprise Vault Version : 11.0.1.3527 EV Indexing Server Windows Server 2012 R2 Standard. Enterprise Vault Version : 11.0.1.3527 Please help me in this regards. If any other information, I am happy to provide that.2.1KViews1like9CommentsSome email have been in pending state for a very long time
I have some users that have email items that have been pending for quite some time. I am not sure how to resolve this. The archive process is running and most items archived but some just will not come out of the pending state. Any available solutions?Solved812Views0likes3CommentsIndex Missing Items after user is migrated to exchange in new domain
We have a problem with Indexes missing items after mailbox migration. We are in the middle of migrating users from our source domain to our target domain for a company merger. They did not want to migrate the data in the current EV system but still want to have access to it. Once the user is migrated they have maintain access to the legacy Vault Archivevia the webpage search. I have noticed after several migrations the indexes for the migrated users' archive are missing items and the user cannot find them when searching. At first I just ran a sync job and everything was fine. but after seeing more of these it became a concern. I found a users that was migrated 2 weeks ago whose index was still missing items. That is surely enough time for the index to sync. I did a Run Now onthe indexing task for that EV server and the index was still missing items. It is only the items that were archived since the migration process kicked off. The process can take several days because they are using Dell migration manager tool which syncs the contents of the mailbox across to the new mailbox in the target domain before the final migration cutover is scheduled. None of the messages are removed from the source mailbox.There are no relevant index task errors in the event log about it. The were a couple of errors like the example below but was only for two users and not for the users in question. Any insight would be appreciated. __________________________________________________________________________________ A search failed with error "Value cannot be null. Parameter name: key". Archive: *Archive Display Name* Archive ID: 14D499E900E075A41A4EA5F844B2654371110000evsite1 Index volume ID: 23413 User: *TargetDomain*\*Username* Maximum results: 50 Timeout (seconds): 120 Sort order: -date ___________________________________________________________________________________ Some basic info about our setup: EV 10.0.4 EV Servers =Server 2008 R2 EV SQL = Server 2012 R2 Current -Exchange 2010 SP3 RU7 Destination - Exchange 2013494Views0likes0CommentsJournal Archive Oldest/youngest item date NULL
Hi All, I need to figure out which Journal archives can be deleted by looking at the oldest and youngest item in the archive. When I run the sql query to pull the oldestitemdateUTC and YoungestItemDateUTC it shows as NULL for most of the archives. Is there a way to set this? Using the expiry process isn't an option because we are looking at processing against 3+Billion items. Running EV 10.0.4 HF3 Any suggestions/solutions are much appreciated!Solved1.1KViews0likes6Comments