EV Audit query question
Hi All, I have stucked in the middle of situation as described below, I'm planning have results of "who & which" deletetion action taken in EV Archiving, Example result which i want to get result of : yyyy archive point deleted by Aaaa user. Query i tried is like ; DECLARE @ArchiveId varchar(112) DECLARE @StartDateTime datetime DECLARE @EndDateTime datetime SET @ArchiveId = '1B29F35DAA512AC47A64558FDF7A614571110000example.local' SET @StartDateTime = '2017-10-05 08:27:48' SET @EndDateTime = '2017-10-05 08:28:37' CREATE TABLE #ArchiveFolders ( VaultEntryId varchar(112) ) INSERT INTO #ArchiveFolders SELECT VaultEntryId FROM [EnterpriseVaultDirectory].[dbo].[ArchiveFolderView] WHERE ArchiveVEID = @ArchiveId SELECT * FROM [EnterpriseVaultAudit].[dbo].[EVAuditView] auditView LEFT JOIN #ArchiveFolders archFolder ON archFolder.VaultEntryId = auditView.Vault WHERE AuditDate BETWEEN @StartDateTime and @EndDateTime AND CategoryName in ('Search', 'Delete') ORDER BY AuditID DROP TABLE #ArchiveFolders This query returns me result of deleted items, however the thing i want to combine this result is "whom archive point" As explained above , Vault section is generated, however generated result is not giving us correct archiving point. with this result it's quite hard to understand taken deletion action. May i ask your support to get best result according to my request?
Seeking SQL query returning per-user count of (non-legal hold) items to be expired from EV
Hi all, Long-time listener, first-time caller. Our customer is looking to turn on expiry in their environmentfor the first time.They use EV in a non-traditional manner, so of 32MM+ items, upwards of 2/3 (maybe even 9/10)are on legal hold via DA. Effectively the only items not on legal hold are from cases thatwere active but have since been closed, removing the holds. Many of the holds overlap, as well. We have successfully tested expiry in a near-duplicateQA EV environment and removed about 2MM items without incident. After presenting that result, the customer's IT team has requested that we add an additional step to present to legal before advancing into Production. They'd like as granular a report as possible of what will be removed so they can confirm the data to be expired should be expired. Criteria are below: Asimplecount of items to be removed per user would be the bare minimum. A better solution would include retention categories The perfect query would provide: Granular item-by-item reporting (for at least some users) Ameans by which at least a subset of physical savesets could belocated and presented After digging around the forums for quite some time, I've tested versions ofJesusWept3's query (which looks like it should do exactly what I need) but: In my lab (which does not have DA) I need to remove any references to the holdsaveset table or else it returns no results I'm considering adding DA to my lab to test it, but I have little doubt thatJesusWept3knows his stuff. I'm confident that it will work. In the QA environment, looking at just one of three vault stores, I stopped it after about 36 hours of execution, made some modifications and was unable to make it work more efficiently. I started it again and it has still not completed running after anotherhours.Even if it does conclude after, say, 48 hours, this is not likely to be an acceptable option to management. Please let me know if you have any tweaks, experience or advice to offer
