The Indexing Service is now responsible for discovering items that are pending addition/deletion/update in index volumes. The Indexing Service will only directly check relevant databases for any pending work where the index volumes are managed by the indexing server on which it is located. As mentioned in the ‘Starting the Indexing Service’ section of this document, when the Indexing Service starts, pending additions/deletions/updates are processed. The Index Admin Service is also scheduled to check for pending work at set intervals while it is running, the details of which are listed below.

The Indexing Service processes index volumes every hour that have their WorkPending flag set to 1 in the Directory database IndexVolume table. This is set if there are some items that have been added/deleted/updated in the archive, but that have not yet been added/deleted/updated in the index. The number of processed index volumes are then reported in the event viewer.

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          6/20/2011 9:56:15 AM
Event ID:      41365
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Summary of the current index volume check:

Volumes synchronized: 1
Failed volumes synchronized: 0

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41365
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41365</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-06-20T08:56:15.000000000Z" />
    <EventRecordID>24868</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Summary of the current index volume check:

Volumes synchronized: 1
Failed volumes synchronized: 0

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.</Data>
  </EventData>
</Event>

By default, every six hours, the Indexing Service will process any failed index volumes. The number of failed index volumes processed is reported in the event viewer:

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          7/5/2011 2:28:31 AM
Event ID:      41365
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Summary of the current index volume check:

Volumes synchronized: 0
Failed volumes synchronized: 4

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41365
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41365</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-05T01:28:31.000000000Z" />
    <EventRecordID>26126</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Summary of the current index volume check:

Volumes synchronized: 0
Failed volumes synchronized: 4

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.</Data>
  </EventData>
</Event>

Every ten hours, a full Vault Store database check is performed to find work to process, any index volumes that are found to have any pending additions, deletions or updates are queued for processing. This will generate an event message detailing the number of index volumes that have been processed:

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault
Date:          7/5/2011 10:26:59 AM
Event ID:      41365
Task Category: Index Admin Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      IndexServer1.server.local
Description:
Summary of the current index volume check:

Volumes synchronized: 7
Failed volumes synchronized: 4

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=41365
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Enterprise Vault " />
    <EventID Qualifiers="0">41365</EventID>
    <Level>4</Level>
    <Task>132</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-05T09:26:59.000000000Z" />
    <EventRecordID>26169</EventRecordID>
    <Channel>Symantec Enterprise Vault</Channel>
    <Computer>IndexServer1.server.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Summary of the current index volume check:

Volumes synchronized: 7
Failed volumes synchronized: 4

The next synchronization checks will take place as follows:

Volumes having pending work in 0 hours and 59 minutes
Failed volumes in 5 hours and 59 minutes
All volumes in 9 hours and 59 minutes.</Data>
  </EventData>
</Event>

In the VAC, the schedule for processing pending work can be adjusted by changing the following settings:

1. Open the VAC
2. Right click on the Computer and select Properties
3. On the Computer Properties, select the Advanced tab
4. Update the settings as required:
   a. Frequency of checks for index volumes to process (Default 1 hour)
   b. Frequency of checks for failed volumes (Default 6 hours)
   c. Frequency of full checks for index volumes to process (Default 10 hours)