How to audit Discovery Accelerator ?
Hi Everybody, EV version is11.0.1 If it is possible I would like toenable auditingfor Discovery Accelerator. 5 years ago it wasasked inforum discuss about this issue :https://www-secure.symantec.com/connect/forums/auditing-actions-taken-discovery-accelerator Auditing situationfor DA still is the same or is there any new work ? Thank you,Solved5.5KViews0likes12Comments
Getting error while running reports in compliance accelerator
Hi All, I migrated my SQL server 2 weeks back all is working fine except the reporting feature in CA, when users try to run the report it fails and gives error. The current action cannot be completed.The user data source credentials do not meet the requirements to run this report or shared dataset.Either the user data source credentials are not stored in the report server database, or the user data source is configured not to require credentials but the unattended execution account is not specified. ---> Microsoft.ReportingServices.Diagnostics.Utilities.InvalidDataSourceCredentialSettingException: The current action cannot be completed. The user data source credentials do not meet the requirements to run this report or shared dataset. Either the user data source credentials are not stored in the report server database, or the user data source is configured not to require credentials but the unattended execution account is not specified. SQL server is 2008 R2 and CA server version is 9.0.2Solved3.2KViews0likes2Comments
How can I search and export in Discovery Accelerator
I tried following some documentation but I must be missing something basic. I am trying to search specific archives in my vault using discovery accelerator and export the findings to PST files but cannot for the life of me figure out how to do it. Any help is greatly appeciated. I am using Enterprise Vault 8.0.2 for Exchange. I have DA installed and have run searches but cannot figure out how to export the data.Solved3KViews1like12Comments
DA search terms and symbols
I'm looking at a particular search where they are looking for near hits and, amongst the search terms, excluding to or from certain targets. eg. restructur match within 10 characters as well as not to or from T:Joe McSweeney. Also How many wildcards can you use in a single line before the search is considered malformed?Solved2.9KViews1like10Comments
Discovery Accelerator - Export MessageID, InternetMessageID, ThreadID or MD5Hash with PST
Hello to everyone, I'm looking for some assistance or suggestions, I have a client that is using Enterprise Vault to performeDiscovery; they're then exporting to pst the emails they've collected and sending them to us. From reading a little bit in the reviewers guide, it looks like they're using the production export and assigning each email an ExportID which they want to reference in talking about emails that they've sent us. The issue is that we don't have a good way to import the PSTs into our eDiscovery tool for processing and producing the document. Is there anyway to export the MessageID, InternetMessageID, ThreadID or MD5Hash with the PSTduring production so that we can import this as metadata into our eDiscovery tool? Any help or suggestions would be greatly appreciated. JacobSolved2.5KViews0likes7CommentsAccess to research folder of ex-employee
Hi, One of user needs to access a research folder created by co-worker who already left the company.Even with administrator permission, we are not able to access the role assignment tab to change the permission.As far as I know, only the folder owner can change the permission.But in our case, since the folder owner already left the company, we are left with no option. Is there anyway to achieve this or does this require an enhancement from symantec?Solved2.4KViews1like3Comments
DA performance issues - recommendation
Hi Running EV/CA/DA 9.0.2 Havea single EV SQL server, and a single CA/DA SQL server. SQL servers are 2008 R2 VMs, 4 CPU with 32GB of RAM. Planning on upping CPUs to 8GB. We've had some performance issues recently in the environmnent around CA and DA, mainly due to a recent 10-fold increase in DA usage, with massive searches, acceptances, legal holds, etc. We went from 7 million messages searched for in Feb to 100 million messages searched for in Mar, and some of these massive searches were accepted, put on legal hold etc. DA database size went from 200GB in early Mar, to 500GB in late Mar, now around 385GB. CA database is fairly constant around 68GB. Question 1 - what reduces DA database size? Deleting cases? Taking legal holds off? Other than not increasing DA usage 10-fold and being mindful of massive legal holds, etc., I am wondering what to do to improve performance, outside of the standard tech docs such as http://www.symantec.com/business/support/index?page=content&id=TECH63230 With a DA database of 500GB, maintenance is very time consuming with the time needed for SQL dumps, index reorgs, etc. DA10 SQL best practise guide states: You may need to roll over customer databases to remain within the available storage capacity. The database storage requirements are high. To reduce storage costs, you may want to roll over the database periodically to a new customer database (that is, create all new cases in a new database), and then archive the old database when it is no longer active. Alternatively, you can move the old customer database to slower storage and disable the associated Discovery Accelerator customer tasks. This would allow the customer database to be brought online quickly. Question 2 - at what point should database be rolled over? My understanding is that there isn't a real way to "close" or "archive" a DA customer database. The best approach is to stop any activity in it (e.g. scheduled searches) and advise users to use a new database. What does disabling the DA customer task do? Does that make the database inaccessible to end users? The "Co-locating multiple customer databases" section says it may pay to split DBs between different SQL servers, but doesn't give much guidelines around at what point this should be done. Question 3 - "Additional customer databases may create an impact at the Discovery Accelerator server and the underlying Enterprise Vault infrastructure, which needs to be considered before implementation" - what sort of impact? Is this if multiple customer databases are created on a single SQL server instead of multiple servers? Any advice appreciated. Thanks.Solved2.3KViews1like14CommentsDiscovery Search on specific attachment name
Using Accelerator 7.0 Can I search for an attachment with a specific name? From the help it seems I can just specify the type of extension rather than the name before the file type e.g. all documents sent in a defined time period called "symantec.doc". This doesn't seem to be possible. It looks like I have to search for all .doc's within that period or know some content of the file to find it. All I know is the name. From help Extension Specifies the file name extensions of particular types of attachments for which to search. Separate the extensions with space characters. For example, type the following to search for items with HTML or Microsoft Excel file attachments: .htm .xls If you specify one or more attachment types, only the attachments are searched, and not the items that contain them. For example, you cannot search for items that have a specific word in their subject line or content and that contain a specific type of attachment.Solved2.1KViews0likes6Comments
Custom CA Reports
Hey. The standard CA reports are pretty useful, but I'm wondering it it's possible to create a custom report or modifyanexisting one. Specifically, I'm inerested in "Monitored IDs by Department". That report only includes messages from random sampling or guaranteed sample searches, but I'd like one that covers scheduled searches as well. I don't need for the report to be visible in the CA console.If there's a database query that returns the desired info, I could transform that into a CSV which would be just fine. Poking around in the database, I haven't been able to make a lot of headway. Any ideas?Solved2.1KViews1like4CommentsReport for items reviewed by a reviewer in CA
Hi , I have a requirement to prepare a report on total no of items reviewed, pending and questioned for one employee in compliance accelerator. I checked the inbuilt CA report " Evidence of exchange(internal) review by employee " , but it displays all the columns as "0". Later, I came to know that CA report only displays messages from random sampling and not from immediate or scheduled searches and review. Is there any otherway to getthis report?Solved2.1KViews4likes4Comments