Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Archiving and eDiscovery Community Blog

Events logged for collections

Created: 13 Dec 2012 • Updated: 29 May 2014 • 1 comment
Rob.Wilcox's picture
-1 1 Vote
Login to vote

 

One of the things that people sometimes consider doing on their Enterprise Vault environment is to enable collections.  Regular, plain, simple NTFS Collections, done by Enterprise Vault.  What this does is collect together some of the files that Enterprise Vault has generated when archiving items, and put them in to a CAB file.
 
This has the advantage that backups can be sped up somewhat because the many, many small files are now much fewer, larger files.. and backup software likes things like that.
 
When enabling collections, and running them, these are the sort of events that you can see logged in the event log:
 
Information     28/11/2012 16:09:56     Enterprise Vault      6854     Storage File Watch
 
Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          28/11/2012 16:09:56

Event ID:      6854

Task Category: Storage File Watch

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      ev1a.EV.Local

Description:

A Partition's Collector run has started.

Partition Root Path: C:\Enterprise Vault Stores\vs1 Ptn1
 
And then when stopping:
 
Information     28/11/2012 16:10:02     Enterprise Vault      6855     Storage File Watch
 
Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          28/11/2012 16:10:02

Event ID:      6855

Task Category: Storage File Watch

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      ev1a.EV.Local

Description:

A Partition's Collector run has finished.


Partition Root Path: C:\Enterprise Vault Stores\vs1 Ptn4


Archived items: 0

Files added to collections: 0

Collections: 0


Time taken for the run [H:M:S]: 0:00:00 
 
 
Event logged when backup is needed, because items aren't put in to collections until they have been backed up :
 
Information     28/11/2012 16:04:06     Enterprise Vault      7133     Storage File Watch
 
Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          28/11/2012 16:04:06

Event ID:      7133

Task Category: Storage File Watch

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      ev1a.EV.Local

Description:

A Partition's Collector run has finished.


Some files were not collected because they have not been backed up.


Partition Root Path: C:\Enterprise Vault Stores\vs1 Ptn5


Archived items: 0

Files added to collections: 0

Collections: 0


Time taken for the run [H:M:S]: 0:01:22
 
When a good amount HAS been collected we see:
 
Information     28/11/2012 16:05:55     Enterprise Vault      6855     Storage File Watch
 
Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          28/11/2012 16:05:55

Event ID:      6855

Task Category: Storage File Watch

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      ev1a.EV.Local

Description:

A Partition's Collector run has finished.


Partition Root Path: C:\Enterprise Vault Stores\vs1 Ptn1


Archived items: 7941

Files added to collections: 7986

Collections: 41


Time taken for the run [H:M:S]: 0:03:55
 

Comments 1 CommentJump to latest comment

patriot3w's picture

Thanks for sharing.

0
Login to vote