Key Event Messages that can be seen when starting the Indexing Service

Article:HOWTO56268  |  Created: 2011-07-27  |  Updated: 2011-07-29  |  Article URL http://www.symantec.com/docs/HOWTO56268
Article Type
How To



This document aims to highlight the key event messages that are seen when starting the Indexing Service.

 

The server Cache location has not been set

A Cache location must be specified on every Indexing Server prior to starting the Indexing Service. During Indexing Service startup, the service checks that the server Cache location has been configured correctly. If it has not been set, then the Indexing Service will stop.


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          7/4/2011 5:15:12 PM
Event ID:      41312
Task Category: Index Admin Service
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
The Indexing Service could not complete all the required startup routines: Enterprise Vault Server Cache is not configured for this computer. Service will be stopped.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41312
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41312</EventID>
    <Level>2</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-04T16:15:12.000000000Z" />
    <EventRecordID>2504</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The Indexing Service could not complete all the required startup routines: Enterprise Vault Server Cache is not configured for this computer. Service will be stopped.</Data>
  </EventData>
</Event>


See the Enterprise Vault Administration Console help for details on setting the Cache location.

 


Paths to index locations that contain non-ASCII characters

When the Indexing Service starts, it checks for index locations that have invalid characters in their path names. If any of the path names contain non-ASCII characters, then the Indexing Service will close these locations and then the Indexing Service will stop. An event is displayed in the event viewer to prompt the user that this has occurred:


Event ID:  41312
Task Category:  Index Admin Service
Level:  Error
Description:

The Indexing Service could not complete all the required startup routines:
Some of the open index locations contained invalid characters.
These index locations have been closed. Service will be stopped.


The Indexing Service can now be manually restarted.


The Indexing Service checks and reports index locations that are closed or in backup mode

Any index locations that are closed or in backup mode are reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/24/2011 1:53:51 PM
Event ID:      41307
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
The following index locations are closed and/or in backup mode:

\\indexserver1\c$\Remote Location\index1
\\indexserver1\c$\Remote Location\index2
\\indexserver1\c$\Remote Location\index3
\\indexserver1\c$\Remote Location\index4
\\indexserver1\c$\Remote Location\index5
\\indexserver1\c$\Remote Location\index6
\\indexserver1\c$\Remote Location\index7
\\indexserver1\c$\Remote Location\index8
\\indexserver1\e$\RemoteIndex1\index1
\\indexserver1\e$\RemoteIndex1\index2
\\indexserver1\e$\RemoteIndex1\index3
\\indexserver1\e$\RemoteIndex1\index4
\\indexserver1\e$\RemoteIndex1\index5
\\indexserver1\e$\RemoteIndex1\index6
\\indexserver1\e$\RemoteIndex1\index7
\\indexserver1\e$\RemoteIndex1\index8
 

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41307
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41307</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-24T12:53:51.000000000Z" />
    <EventRecordID>29466</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>TwixIndex1.twix.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The following index locations are closed and/or in backup mode:

\\indexserver1\c$\Remote Location\index1
\\indexserver1\c$\Remote Location\index2
\\indexserver1\c$\Remote Location\index3
\\indexserver1\c$\Remote Location\index4
\\indexserver1\c$\Remote Location\index5
\\indexserver1\c$\Remote Location\index6
\\indexserver1\c$\Remote Location\index7
\\indexserver1\c$\Remote Location\index8
\\indexserver1\e$\RemoteIndex1\index1
\\indexserver1\e$\RemoteIndex1\index2
\\indexserver1\e$\RemoteIndex1\index3
\\indexserver1\e$\RemoteIndex1\index4
\\indexserver1\e$\RemoteIndex1\index5
\\indexserver1\e$\RemoteIndex1\index6
\\indexserver1\e$\RemoteIndex1\index7
\\indexserver1\e$\RemoteIndex1\index8
</Data>
  </EventData>
</Event>


If all available index locations are closed or in backup mode, then no data will be indexed until at least one index location is open and not in backup mode. This is also reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/27/2011 4:50:11 PM
Event ID:      41316
Task Category: Index Admin Service
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
All the index locations on this server are closed and/or in backup mode. No indexing can take  place until at least one location is open and taken out of backup mode.

For more information, see Help and Support Center at 
http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41316
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41316</EventID>
    <Level>3</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-27T15:50:11.000000000Z" />
    <EventRecordID>239258</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>All the index locations on this server are closed and/or in backup mode. No indexing can 
take place until at least one location is open and taken out of backup mode.</Data>
  </EventData>
</Event>

 


Indexing Service initialization

When the Indexing Service is initialized, it is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/16/2011 4:59:02 PM
Event ID:      41299
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
The Indexing Service is pending initialization.
Requesting additional time for initialization routines....

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41299
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41299</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-16T15:59:02.000000000Z" />
    <EventRecordID>7068</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The Indexing Service is pending initialization.
Requesting additional time for initialization routines....</Data>
  </EventData>
</Event>

 


The Index Volume Metadata on disk is compared with the Directory Database

A consistency check between the Index Volume Metadata on disk and the Directory Database is performed as the service starts, which is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/16/2011 4:59:05 PM
Event ID:      41372
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Indexing Service has started the synchronization of index volume metadata between the indexing engine repository and the Directory database.  

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41372
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41372</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-16T15:59:05.000000000Z" />
    <EventRecordID>7069</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Indexing Service has started the synchronization of index volume metadata between the indexing engine repository and the Directory database.  </Data>
  </EventData>
</Event>


If there is a mismatch between the Index Volume Metadata on disk and the Directory Database, then this can cause the Indexing Service to take a long time to start up, as this work must be completed prior to the Indexing Services being available.

 


The Indexing Service has started

When the Indexing Service has started, this is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/16/2011 5:00:20 PM
Event ID:      41297
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
The Indexing Service has started (10.0.0.1299).

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41297
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41297</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-16T16:00:20.000000000Z" />
    <EventRecordID>7075</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The Indexing Service has started (10.0.0.1299).</Data>
  </EventData>
</Event>


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/16/2011 5:00:20 PM
Event ID:      41303
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
The Indexing Service has been started, but must complete additional work before it can respond to external requests.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41303
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41303</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-16T16:00:20.000000000Z" />
    <EventRecordID>7076</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>The Indexing Service has been started, but must complete additional work before it can respond to external requests.</Data>
  </EventData>
</Event>

 


Indexing Engine Metadata synchronization completion

When synchronization between the Indexing Engine Metadata on disk and the Directory Database is complete, but did not change anything, this is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/17/2011 9:09:33 AM
Event ID:      41373
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Indexing Service has completed the synchronization of index volume metadata between the indexing engine repository and the Directory database. 

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41373
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41373</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-17T08:09:33.000000000Z" />
    <EventRecordID>7147</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Indexing Service has completed the synchronization of index volume metadata between the indexing engine repository and the Directory database. </Data>
  </EventData>
</Event>

 

When synchronization between the Index Volume Metadata on disk and the Directory Database is complete and metadata was created or the location has been updated, this is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/27/2011 4:29:05 PM
Event ID:      41377
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Indexing Service has completed the synchronization of index volume metadata between the indexing engine repository and the Directory database.
Total index volume(s) whose metadata was created: 1
Total index volume(s) whose location was updated: 0

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41377
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41377</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-27T15:29:05.000000000Z" />
    <EventRecordID>25644</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Indexing Service has completed the synchronization of index volume metadata between the indexing engine repository and the Directory database.
Total index volume(s) whose metadata was created: 1
Total index volume(s) whose location was updated: 0</Data>
  </EventData>
</Event>

 


If there are 32 bit index volumes in the environment

Additional Indexing service components are started if there are 32bit index volumes in the environment, which are reported in the event viewer. If it is a fresh installation of V10 or all pre-V10 index volumes have been upgraded, then the Index Broker will not start and it will not be reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/17/2011 9:09:37 AM
Event ID:      7345
Task Category: Index Broker
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
IndexBroker has started on this server to manage old 32 bit index volumes.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=7345
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="16388">7345</EventID>
    <Level>4</Level>
    <Task>23</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-17T08:09:37.000000000Z" />
    <EventRecordID>7148</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

 


The Indexing Service checks for pending work after startup

The number of index volumes found with pending work is reported in the event viewer:


Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/20/2011 9:56:15 AM
Event ID:      41365
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Summary of the current index volume check:

Volumes synchronized: 1
Failed volumes synchronized: 0

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41365
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41365</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-20T08:56:15.000000000Z" />
    <EventRecordID>24868</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Summary of the current index volume check:

Volumes synchronized: 1
Failed volumes synchronized: 0

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.</Data>
  </EventData>
</Event>

 

 

 



Article URL http://www.symantec.com/docs/HOWTO56268


Terms of use for this information are found in Legal Notices