Enterprise Vault (EV) services fail to start with the error: "The Enterprise Vault Archiving Service for EXCH1 service on Local Computer started and then stopped."

Article:TECH48953  |  Created: 2010-01-21  |  Updated: 2012-08-22  |  Article URL http://www.symantec.com/docs/TECH48953
Article Type
Technical Solution

Product(s)

Environment

Issue



Enterprise Vault (EV) services fail to start with the error: The Enterprise Vault Archiving Service for EXCH1 service on Local Computer started and then stopped.


Error



Event Type: Error
Event Source: Enterprise Vault
Event Category: Admin Service
Event ID: 4141
Date: 4/1/2010
Time: 2:50:46 AM
Computer: EVSERVER1
Description:
Insufficient diskspace is available on drive C: for the Enterprise Vault to run
Enterprise Vault will now be shut down; to correct this problem, delete any unwanted files and restart Enterprise Vault.
 

 V-437-4141


Cause



Services can stop due to many reasons, but the recommendation is to check the Windows Event Viewer logs as a first step for troubleshooting such issues. In this case, the problem is that the services were stopped due to insufficient disk space on a local drive which was revealed in the Windows Event log entry.

Note: EV will shut down when 95% of Virtual Memory is used or if a local drive is 99% full.

 


Solution



The following methods can be used to resolve or alleviate the problem:

1. Free up the space on local drive(s) and reboot the server. Verify the services are able to start and verify the Windows Event Viewer log is no longer reporting Event 4141.


2. The start up parameters of the Enterprise Vault Admin Service can be modified to specify which local disks to monitor and which to exclude.


3. The NoMonitor registry key can be set up to disable/enable monitoring of memory and all local disk space resources.



Modifying the Admin Service:

1. In the Windows Control Panel, double-click Services.

2. Go to the Properties of the Enterprise Vault Admin Service.

3. Click Stop. A warning is displayed stating that all the Enterprise Vault services will be stopped.

4.  In the Startup Parameters box, enter the desired parameters per the examples given below.

5. Click Start from within the properties box to start the service with the specified parameter and then click OK.

Note: It is imperative to start the Enterprise Vault Admin Service from the properties page after entering the startup parameters.  Closing the Enterprise Vault Admin Service properties before starting the service will cause the startup parameters to be lost.


Examples:

1. To monitor only disks C:, E:, and F:
/DISKS=CEF

2. To ensure that the monitoring parameters are used each time the Enterprise Vault Admin Service is started utilize the SAVE parameter:
/DISKS=CEF   /SAVE

3. To monitor all disks (default behavior):
/DISKS

4. To disable monitoring of memory and all local disk space resources:
/NOMONITOR 
 
5. To ensure that monitoring of memory and all local disk space resources is disabled each time the Enterprise Vault Admin Service is started utilize the SAVE Parameter:
/NOMONITOR   /SAVE

6. To enable monitoring of memory and all local disk space resources:
/MONITOR

7. To ensure that monitoring of memory and all local disk space resources is enabled each time the Enterprise Vault Admin Service is started utilize the SAVE Parameter:
/MONITOR   /SAVE

To ensure the changes to the Startup Parameters are successfully saved, be certain that a DWORD called DiskMap has been created underneath HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\AdminService\Disk for 32-bit EV servers.  For 64-bit EV servers, the location is HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault\AdminService\Disk.

Please note that this value can take on different values depending upon the value specified under Startup Parameters.

Disabling the monitoring of disk space on all local disks:
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.


1. Open the registry using Start>Run>Regedit


2. For 32-bit EV servers, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\AdminService.  For 64-bit EV servers, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault\AdminService.


3. Right-click and select New>DWORD Value.


4. Enter NoMonitor for the DWORD name.


5. Double click on the NoMonitor DWORD and enter 1 as the value data.


6. Restart the Enterprise Vault Admin Service to apply the changes.


The possible values for this registry key are as follows:
0 - Monitor resources
1 - Do not monitor resources


Supplemental Materials

SourceEvent ID
Value4141
Description

Insufficient diskspace.


SourceUMI
ValueV-437-4141
Description

Insufficient diskspace.



Legacy ID



284983


Article URL http://www.symantec.com/docs/TECH48953


Terms of use for this information are found in Legal Notices