StorageFileWatch is returning Event ID: 6511 and not able to rollback WatchFile table records when an invalid saveset is found.
|Article:TECH137692|||||Created: 2010-08-12|||||Updated: 2013-05-23|||||Article URL http://www.symantec.com/docs/TECH137692|
This issue has been seen when Enterprise Vault (EV) attempts to rollback a database entry due to an invalid SIS part being found. A 7110 warning will also appear for this item showing the following information:
Mailbox = [/o=EV/ou=First Administrative Group/cn=Recipients/cn=User1]
Subject = [Re: Fwd: Updated spreadsheet]
Original Location = [?Archive?Inbox]
Type : Error
Event : 6511
Source : Enterprise Vault
Category : Storage File Watch
Computer : EVSERVER
Error deleting WatchFile database record for missing Saveset file
[Partition: VaultStore01 Ptn1]
[Vault ID: 1CD1393F2DF7BC24DBAF5D789D63299B01110000evsvr]
[Saveset Filename: \\evsvr\VaultStoreGroups\VaultStoreGroup\VaultStore01\ptn1\2010\04-13\A\05E\A05E6E1D341F899A609771521361C8C1.DVS]
[Transaction ID: A05E6E1D341F899A609771521361C8C1]
The Prevent deletion of archived items in this category setting is not allowing the rollback of the database entry to occur.
Uncheck the option to Prevent deletion of archived items in this category from the Retention Categories affected by this issue and restart the EV Storage Service. This should allow the transaction to rollback properly and the item to be archived again.
Note: If it is necessary to prevent items from being deleted, by Storage Expiry or by users, from this retetention category then Storage Expiry should not be run and the Site option for Users can delete items from their archive should be unchecked.
This issue has been addressed as part of the following release:
Enterprise Vault 9.0.3 - Release Details
Enterprise Vault 10.0.1 - Release Details
"Prevent deletion of archived items in this category" is causing watchfile records to remain when invalid saveset is found.
Article URL http://www.symantec.com/docs/TECH137692