File System Archiving (FSA) does not archive all volumes and reports warning Event ID: 40976 "There are no archive points associated with this volume"

Article:TECH72155  |  Created: 2010-01-21  |  Updated: 2010-01-21  |  Article URL http://www.symantec.com/docs/TECH72155
Article Type
Technical Solution

Product(s)

Environment

Issue



File System Archiving (FSA) does not archive all volumes and reports warning Event ID: 40976 "There are no archive points associated with this volume"

Solution



When a File System Archive is run it reports Event ID 40976 with description volumes do not have archive points associated. As shown below

Type: Warning
Event: 40976
Source: Enterprise Vault
Category: File System Archiving Task
Description:
The file system volume \\?\UNC\server.domain.com\Volume1 has no Archive points associated.
No items will be archived for this volume.
See the Administrator Help for information on configuring file system volume archive points.

In the FSA report it displays the following:

\\server.domain.com\volume1
Estimated space saved after shortcut creation and file deletion (MB): 0.00
No items were matched by any rule. Some files may have been ignored because of policy permission settings.
Archive Point Summary
---------------------
ArchivePointPath VaultStoreName RemoveSafetyCopies
-----------------------------------------------------------------------------------------
There are no archive points associated with this volume

The description in this warning and results in the archive report may be misleading, as archive points may exist and this may actually be a checkpoint issue.

To confirm if this is a true Archive Points issue or Checkpoint issue perform the following steps:

STEP 1: First confirm that archive points do exist to confirm the issue explained in this tech note is related to the issue.

To confirm archive points exists perform the following steps

Command Prompt:
1. Open a command prompt, browse to the Enterprise Vault Directory most commonly c:\Program Files\Enterprise Vault\ and type

archivepoints read \\server.domain.com\Volume1

2. If an archive point exists it will display the content of the archive point, such as Created Date
3. If an archive point does not exist it will display the message below, and confirms the issue experiencing is not checkpoint related, for information on how to create archive points please refer to the Utilities.pdf which comes with the installation media.

\\server.domain.com\Volume1 : Archive point on the specified folder does not exist.

STEP 2: If archive points do exists perform a Dtrace
Please follow the instructions in the Related Documents section article 276120 in order to obtain a Dtrace.

Dtrace the following:
EvFsaArchivingTask

From the Dtrace the following behavior will be seen.
In the example below, there are two volumes, one volume is being shown as having No Archiving Points and the remaining volume is being processed

First it starts by reading the checkpoint.xml
{FileSystemArchivingCheckPoint.ReadCheckPointFile} Start reading the checkpoint file named .\FSATaskCheckPoint\File System Archiving Task_EV_ArchiveRunNow.xml
{FileSystemArchivingCheckPoint.ReadCheckPointFile} Read the volumes fully walked in the last runs from the checkpoint file .\FSATaskCheckPoint\File System Archiving Task_EV_ArchiveRunNow.xml

Now it reads the volumes which have been fully walked - these are volumes which have finished processing during the run for which the checkpoint.xml has been created
Volume 1:
{FileSystemArchivingCheckPoint.ReadCheckPointFile} Adding volume 1099ACBCE68E66443B8A1C62DC8150F151011000EV1 as fully walked in one of the last runs

It has now finished checking for all fully walked volumes and will now check partially walked - these are volumes which have not finished processing for which the checkpoint.xml has been created

{FileSystemArchivingCheckPoint.ReadCheckPointFile} Completed reading the volumes fully walked in the last runs from the checkpoint file .\FSATaskCheckPoint\File System Archiving Task_EV_ArchiveRunNow.xml
{FileSystemArchivingCheckPoint.ReadCheckPointFile} Read the volumes partially walked in the last runs from the checkpoint file .\FSATaskCheckPoint\File System Archiving Task_EV_ArchiveRunNow.xml
{FileSystemArchivingCheckPoint.CheckIfVolumeIsReqForProcessing} Volume Volume2 is associated with this FSA Task. Allowing it for processing in this run

It has now finished reading the checkpoint.xml and begins to process the volumes

The checkpoint file instructs the FSA task that volume1 has been fully walked on a previous run so skips it, but after it skips it, it generates Event 40976 and incorrectly reports there is no archive points.

{FileSystemArchivingCheckPoint.CheckIfVolumeFullyWalkedInLastRun} Volume \\?\UNC\server.domain.com\volume1 was fully walked in one of the last runs
{FileSystemArchivingCheckPoint.CheckIfFolderUnprocessedInLastRun} Checking if any folder on volume \\?\UNC\server.domain.com\volume1 was unprocessed in one of the last runs
{FileSystemArchivingCheckPoint.CheckIfFolderUnprocessedInLastRun} No folder on volume \\?\UNC\server.domain.com\volume1 was unprocessed in one of the last run(s)
{FileSystemFolderWalker.Walk} The volume share: \\?\UNC\server.domain.com\volume1 has been fully walked in one of the last runs, so skipping its processing
|Event ID: 40976 The file system volume \\?\UNC\server.domain.com\volume1 has no Archive points associated.| No items will be archived for this volume.|See the Administrator Help for information on configuring file system volume archive points.

A known cause of incorrect error being reported due to checkpointing
During an archive run it successfully processed Volumes 1, but while processing volume 2 there is no free disk space i.e. windows temp file is filled up and not cleared.
This causes the task to fail while processing volume 2, and the checkpoint.xml contains information that volume 1 does no need to processed and will continue to process volume 2

Workaround:
1. Stop the Enterprise Vault (EV) services
2. Browse to the Enterprise Vault installation folder most commonly c:\Program Files\Enterprise Vault\
3. Locate the folder called FSATaskCheckPoint
4. Remove the checkpoint.xml files related to the FSA task which is processing the volumes, the xml will contain the name of the task, as shown below
File System Archiving Task 1_ArchiveScheduled.xml
5. Start the EV services
6. If after clearing the checkpoint files the issue remains please a log a call will the Support Team.

Clearing the TMP files
The temp file location will be cleared every 24 hours, if you notice a build up of tmp files the registry values below will allow you to reduce the time for which they are cleared

DelFilesOlderThanHours
DelFileTypes

Further information about the values can be found in the Registry Values PDF (See Related Documents article 317274)


Solution:
This issue has been addressed as part of the following release:

Enterprise Vault 8.0 SP4
 http://entsupport.symantec.com/docs/337274

Supplemental Materials

SourceETrack
Value1732403
DescriptionEvent ID: 40976 in the event log in the evening getting error message archive points not found "There are no archive points associated with this volume"

SourceEvent ID
Value40976
DescriptionThe file system volume \\?\UNC\server.domain.com\Volume1 has no Archive points associated.


Legacy ID



327503


Article URL http://www.symantec.com/docs/TECH72155


Terms of use for this information are found in Legal Notices