Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.
Archiving and eDiscovery Community Blog

EV Clearing up temporary files

Created: 12 Aug 2009 • Updated: 29 May 2014 • 1 comment
Rob.Wilcox's picture
+1 1 Vote
Login to vote

Several people ask about how Enterprise Vault clears up temporary files, and why it might or might not be working on their system.  Here is how to trace it and see what it is doing :

Create a Dtrace Filter as follows :
 
 
 
Dtrace
Set adminservice v
Filter
Clear includes
Include CCleanUptempFiles
Exit
 
 
 
Log to a file, and then MON
 
 
 
Once an hour you will get the following :
 
 
 
2465 10:00:44.968 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::ThreadRoutine - GetTempPath
2466 10:00:45.390 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::ThreadRoutine - TempPath = C:\DOCUME~1\vsa\LOCALS~1\Temp\
2467 10:00:46.437 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::ThreadRoutine - GetRegistrySettings
2468 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - Try toopen [SOFTWARE\KVS\Enterprise Vault\AdminService]
2469 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - Read [DelFilesOlderThanHours]
2470 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - DelFilesOlderThanHours = [24]
2471 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - Read [DelFileTypes]
2472 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - DelFileTypes = []
2473 10:00:46.671 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::GetRegistrySettings - CloseKey
2474 10:00:47.218 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::ThreadRoutine CleanupFiles loop
2475 10:00:47.843 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::CleanupFiles - Find Files (C:\DOCUME~1\vsa\LOCALS~1\Temp\EV$*.*)
2476 10:00:47.843 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::CleanupFiles - Skipped – Not due for deletion (ev$1.1)
2477 10:00:47.843 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::CleanupFiles - Exit
2478 10:00:49.031 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::CleanupFiles - Find Files (C:\DOCUME~1\vsa\LOCALS~1\Temp\~DF*.TMP)
2479 10:00:49.031 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::CleanupFiles - Exit
2480 10:00:52.749 [5104] (AdminService) <2308> EV:M CCleanUpTempFiles::ThreadRoutine - wait for 1 hour or until service exits.
 
There are a couple of things to note :
 
•           It runs once per hour
•           It will remove non-read-only files which aren’t in use
•           By default it will use the file pattern : $*.* and ~DF*.TMP.
•           It won’t delete files newer than 24 hours old
 
Control of the last two options is through the registry keys :
 
HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\AdminService\
 
 DelFileTypes = “~DF*.tmp;EV$*.*;*.tmp”
 
 DelFilesOlderThanHours 
 
These are read dynamically (at the next run interval)

Comments 1 CommentJump to latest comment

Tim Kuhnell's picture

Dear Rob,

What does this entry in the dtrace-log mean:

 

69478 13:20:54.102 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::CleanupFiles - Failed to delete (EV$MMS$FM$C$1$DST.tmp); GetLastError=5

'5'  does often point to permissions isses?

 

117203 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - Try to open [SOFTWARE\KVS\Enterprise Vault\AdminService]
117204 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - Read [DelFilesOlderThanHours]
117205 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - DelFilesOlderThanHours = [0]
117206 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - Read [DelFileTypes]
117207 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - DelFileTypes = [ “~DF*.tmp;EV$*.*;*.tmp”]
117208 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::GetRegistrySettings - CloseKey
117209 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::ThreadRoutine CleanupFiles loop
117210 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::CleanupFiles - Find Files (C:\Windows\TEMP\EV$*.*)
117211 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::CleanupFiles - Failed to delete (EV$661C.tmp); GetLastError=20
117212 14:20:54.089 [2220] (AdminService) <11608> EV:M CCleanUpTempFiles::CleanupFiles - Failed to delete (EV$D58F.tmp); GetLastError=20
 
-3
Login to vote