Event 13360, 8453, 6643 Attempt to delete an archive, the archive remains marked for deletion and several errors are logged in the EV Event Viewer

Article:TECH74463  |  Created: 2009-01-14  |  Updated: 2014-04-22  |  Article URL http://www.symantec.com/docs/TECH74463
Article Type
Technical Solution

Product(s)

Environment

Issue



After attempting to delete an Enterprise Vault (EV) archive, the archive remains marked for deletion and several errors are logged in the EV Event Viewer


Error



Event Type: Error
Event Source: Enterprise Vault
Event Category: Directory Service
Event ID: 13360
Description:
An error was detected while accessing the Vault Database 'EnterpriseVaultDirectory' (Internal reference: .\ADODataAccess.cpp (CADODataAccess::ExecuteSQLCommand) [lines {1388,1390,1405,1423}] built Jul 3 19:52:25 2009):
Description:
The DELETE statement conflicted with the REFERENCE constraint "FK_VaultInterest_VaultEntryId". The conflict occurred in database "EnterpriseVaultDirectory", table "dbo.VaultInterest", column 'VaultEntryId'.
SQL Command:
DeleteArchive
V-437-13360


Event Type: Error
Event Source: Enterprise Vault
Event Category: Directory Service
Event ID: 8453
Description:
The EnterpriseVault.DirectoryService object reported an error.
The error code was 0x80040e2f
V-437-8453


Event Type: Error
Event Source: Enterprise Vault
Event Category: Storage Delete
Event ID: 6643
Description:
Delete Vault failed
Reason: <0x80040e2f>
Vault Name: John Smith
Vault Store: MBXS01
Vault Id: 1799D2FE5224AA4498A90F8BEA0A17C921110000evsite
V-437-6643


Solution



As part of future enhancements, new tables and stored procedures were added to EV databases which prevent the deletion of an archive when it is in use by another application such as Discovery or Compliance Accelerator. The deletion is prevented by placing a foreign key constraint on the VaultEntryId column in the VaultInterest table located in the EnterpriseVaultDirectory database.
 
The archive noted in Event ID 6643 cannot be deleted until Discovery and/or Compliance Accelerator is no longer using the archive.  A more informative message box is now displayed when attempting to delete the archive in EV 8.0 SP3 and later versions.

Once Discovery and/or Compliance Accelerator is no longer using the archive, the archive will be deleted the next time the Storage Service is re-started.

In order to obtain a list of cases/departments that have an interest in that archive,
 
1. Obtain the Vault ID from the event error: 6643

Replace the vi.VaultEntryID value with the Vault ID in the query below and run this query on the EnterpriseVaultDirectory database to obtain the names of the DA / CA databases that have an interest in the archive.

 

SELECT vi.VaultEntryID
   , r.RootIdentity
   , a.ArchiveName
   , a.ArchiveDescription
   , vi.ConsumerName AS 'DA Customer Name'
FROM VaultInterest vi
JOIN Root r ON vi.VaultEntryID = r.VaultEntryID
JOIN Archive a ON r.RootIdentity = a.RootIdentity
WHERE vi.VaultEntryID =  'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'

 

2. Then insert the Vault ID in the query below and run this query on each of the DA / CA customer database(s) to get a list of the affected cases/departments/folders.

 

SELECT DISTINCT tc.[Name] FROM tblCase tc
JOIN tblIntDiscoveredItems tidi ON tidi.CaseID = tc.CaseID
JOIN tblVaults tv ON tv.VaultID = tidi.VaultID
WHERE tv.KVSVaultEntryID = 'xxxxxxxxxxxxxxxxxxxxxxxx'

 

3. To obtain the search details for the cases/departments/folders that have run searches against the archive, insert the Vault ID in the query below and run this query on each of the DA / CA customer database(s).

 

DECLARE @vid nvarchar(125) SET @vid = 'xxxxxxxxxxxxxxxxxxxxxxxx'
SELECT tc.CaseID
     , tc.Name 'Case/Department/Folder Name'
     , tis.SearchID
     , tis.Name 'Search Name'
     , tsv.NumHits
     , tv.VaultID
     , tv.KVSVaultEntryID
     , tv.KVSVaultName
FROM tblVaults tv
JOIN tblSearchVault tsv ON tv.VaultID = tsv.VaultID
JOIN tblIntSearches tis ON tsv.SearchID = tis.SearchID
JOIN tblCase tc ON tis.CaseID = tc.CaseID
WHERE tv.KVSVaultEntryID = @vid
UNION
SELECT tc.CaseID
     , tc.Name 'Case/Department/Folder Name'
     , tis.SearchID
     , tis.Name 'Search Name'
     , tsva.NumHits
     , tv.VaultID
     , tv.KVSVaultEntryID
     , tv.KVSVaultName
FROM tblVaults tv
JOIN tblSearchVaultsArchived tsva ON tv.VaultID = tsva.VaultID
JOIN tblIntSearches tis ON tsva.SearchID = tis.SearchID
JOIN tblCase tc ON tis.CaseID = tc.CaseID
WHERE tv.KVSVaultEntryID = @vid
ORDER BY tv.KVSVaultName

 

4. Once the list of cases/departments/folders are deleted, the Accelerator interest in the archive will be removed and the housekeeping routines will remove the record from the VaultInterest table and allow the archive to be deleted.

5. If the archive cannot be deleted after deleting all cases/departments that have an interest in the archive, run the following query against the Accelerator Customer Database, replacing the @vid value in the first line with the Vault ID from Event ID 6643, to determine if there are any items that are stuck in the Search tables:

 

DECLARE @vid nvarchar(125) SET @vid = 'xxxxxxxxxxxxxxxxxxxxxxxx'
SELECT DISTINCT tc.[Name] FROM tblCase tc
JOIN tblIntDiscoveredItems tidi ON tidi.CaseID = tc.CaseID
JOIN tblVaults tv ON tv.VaultID = tidi.VaultID
WHERE tv.KVSVaultEntryID  = @vid
UNION
SELECT DISTINCT tc.[Name] FROM tblCase tc
JOIN tblSearchItems tsi ON tsi.CaseID = tc.CaseID
JOIN tblVaults tv ON tv.VaultID = tsi.VaultID
WHERE tv.KVSVaultEntryID = @vid

 

If the query returns results, please contact Technical Support for assistance in removing these items. The Vault Interest information will need to be removed manually.




Legacy ID



331919


Article URL http://www.symantec.com/docs/TECH74463


Terms of use for this information are found in Legal Notices