When searching on Enterprise Vault Audit Viewer,the search result is occasionally unable to list all Audit events after View Attachment Category event is listed.

Article:TECH75843  |  Created: 2009-01-22  |  Updated: 2014-12-12  |  Article URL http://www.symantec.com/docs/TECH75843
Article Type
Technical Solution

Product(s)

Issue



When searching on Enterprise Vault Audit Viewer,the search result is occasionally unable to list all Audit events after View Attachment Category event is listed.


Cause



When searching on Enterprise Vault Audit Viewer,search result is occasionally unable to list all Audit events if View Attachment event is listed.
The search results output is stopped at the event of View Attachment Category.

For Example:
When applying filter to list Audit IDs from 1 to 100, search results list only from 1 to 6 if 6 is View Attachment Category event.
It cannot list from 7 to 100.

Troubleshooting:

1:Run searching by Date from 08/09/2009 0:00 to 08/12/2009 0:00.
 

2:Search results list 12 events.  The last event Category is View Attachment.
 

3:Click Audit ID to list by ascending

4:Found that events are not listed from 7316 to 7323.
 

5:Run searching again by Date from 08/10/2009 15:40 to 08/12/2009 0:00
 

6:Found that all events are listed  including from 7316 to 7323. Event data from 7316 to 7323 are also existed on SQL table.
 

Solution



This issue has been addressed in the following release:

Enterprise Vault 8.0 SP4 - Release Details
http://www.symantec.com/docs/TECH76851


Supplemental Materials

SourceETrack
Value1744908
Description

Audit viewer is unable to show any audit events after view attachment event is displayed.



Legacy ID



336047


Article URL http://www.symantec.com/docs/TECH75843


Terms of use for this information are found in Legal Notices