Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Collected Files Unavailable

Created: 12 Jun 2014 • Updated: 11 Jul 2014 | 4 comments
This issue has been solved. See solution.

Hi,

I'm wondering if anyone can help, I'm seeing a strange issue in a customer's environment.

Basically EVSVR is reporting that they have sevre data loss in a number fo vault store partitions. After digging deeper all of the 'missing' files have been collected and are present in the CAB files, but EV still doesn't see them.

I would attach the EVSVR llogs but they are 1.1GB and 460MB respectfully.

I've run Repair DatabaseRefs and Linkages EVSVR operations but haven't had any joy in resolving the issue. The interesting thing I've found is that running a dumpsaveset gives me the following;

2014-06-12 14:15:46  Log file 'C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141546\EVSVR_DumpSaveset_20140612141546.Log' created/opened
2014-06-12 14:15:46  
2014-06-12 14:15:46  EVSVR Version (10.0.1.1171)
2014-06-12 14:15:46  
2014-06-12 14:15:46  Initialising operation
2014-06-12 14:15:46  Arguments: 19C8678BCE05DB7438840BDFE6430B52E1110000HCCIVault C034BB15BF76AC22429A6D1EE543BB11
2014-06-12 14:15:46  Output folder: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141546\
2014-06-12 14:15:46  Log file path: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141546\EVSVR_DumpSaveset_20140612141546.Log
2014-06-12 14:15:47  Found an archive: Parameter 19C8678BCE05DB7438840BDFE6430B52E1110000HCCIVault is an archive folder entry id belonging to archive '############' that is in vault store '###############'.
2014-06-12 14:15:47  Found a saveset id: Parameter C034BB15BF76AC22429A6D1EE543BB11 is a valid saveset transaction id.
2014-06-12 14:15:47  Initialisation complete
2014-06-12 14:15:47    Archive Entry Id: 181041744EB20BC41843FDC5B67E6AD351110000HCCIVault
2014-06-12 14:15:47    Archive Name: ##############
2014-06-12 14:15:47    Vault Store Entry Id: 1B26B8DB28BDFAF4097A9DEA9D87DAD861210000HCCIVault
2014-06-12 14:15:47    Vault Store Name: ############
2014-06-12 14:15:47    Saveset Id: 201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11
2014-06-12 14:15:47  Starting DumpSaveset operations
2014-06-12 14:15:47  Getting recombined DVS file
2014-06-12 14:15:47  ERROR: Failed to get recombined saveset. Error: Unspecified error  (0x80004005)
2014-06-12 14:15:47                      Event Output: Unable to complete retrieval request      Reason:           The system cannot find the file specified.  (0x80070002)   Vault:              Anning, Lesley   Vault Id:           181041744EB20BC41843FDC5B67E6AD351110000HCCIVault   Item Id:            201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11   Reference:          Vault/RI   Extended Item Info:    Supplementary Info:                                (0xc0041ae2)
2014-06-12 14:15:47  ERROR: GetRecombinedSaveset failed. Error: Unspecified error  (0x80004005)
2014-06-12 14:15:47  Get DVS File and SIS Part files
2014-06-12 14:15:48  ERROR: Failed to get list of constituent parts. Error: %s
2014-06-12 14:15:48  Failed to extract the file from the CAB file. The file name is not in the CAB file index.      (0xc0041bdf)
2014-06-12 14:15:48                      Event Output: Unable to complete retrieval request      Reason:           The system cannot find the file specified.  (0x80070002)   Vault:              Deleted Items   Vault Id:           19C8678BCE05DB7438840BDFE6430B52E1110000HCCIVault   Item Id:            201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11   Reference:          Vault/RI   Extended Item Info:    Supplementary Info:                                (0xc0041ae2)
2014-06-12 14:15:48  ERROR: GetConstituentParts failed. Error: Failed to extract the file from the CAB file. The file name is not in the CAB file index.      (0xc0041bdf)
2014-06-12 14:15:48  Get Vault Store Database records
2014-06-12 14:15:48  Saved database information item: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141546\VSDBRecords.xml
2014-06-12 14:15:48  
2014-06-12 14:15:48  Completed operation with one or more errors. Review the log file for more information.
2014-06-12 14:15:48  
2014-06-12 14:15:48  Log file closed
2014-06-12 14:15:48  

After some thought I copied the DVS file back to it's original location, updated the Saveset entry accordingly and hey presto it works,

2014-06-12 14:16:24  Log file 'C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\EVSVR_DumpSaveset_20140612141624.Log' created/opened
2014-06-12 14:16:24  
2014-06-12 14:16:24  EVSVR Version (10.0.1.1171)
2014-06-12 14:16:25  
2014-06-12 14:16:25  Initialising operation
2014-06-12 14:16:25  Arguments: 19C8678BCE05DB7438840BDFE6430B52E1110000HCCIVault C034BB15BF76AC22429A6D1EE543BB11
2014-06-12 14:16:25  Output folder: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\
2014-06-12 14:16:25  Log file path: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\EVSVR_DumpSaveset_20140612141624.Log
2014-06-12 14:16:25  Found an archive: Parameter 19C8678BCE05DB7438840BDFE6430B52E1110000HCCIVault is an archive folder entry id belonging to archive '############' that is in vault store '#############'.
2014-06-12 14:16:25  Found a saveset id: Parameter C034BB15BF76AC22429A6D1EE543BB11 is a valid saveset transaction id.
2014-06-12 14:16:25  Initialisation complete
2014-06-12 14:16:25    Archive Entry Id: 181041744EB20BC41843FDC5B67E6AD351110000HCCIVault
2014-06-12 14:16:25    Archive Name: ############
2014-06-12 14:16:25    Vault Store Entry Id: 1B26B8DB28BDFAF4097A9DEA9D87DAD861210000HCCIVault
2014-06-12 14:16:25    Vault Store Name: ##############
2014-06-12 14:16:25    Saveset Id: 201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11
2014-06-12 14:16:25  Starting DumpSaveset operations
2014-06-12 14:16:25  Getting recombined DVS file
2014-06-12 14:16:26  Saved recombined DVS file: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\Recombined\DS_201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11.DVS
2014-06-12 14:16:26  Getting recombined DVS DocFile
2014-06-12 14:16:26  Saved recombined DVS DocFile: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\Recombined\DS_201204235198922~200907040438090000~Z~C034BB15BF76AC22429A6D1EE543BB11.DocFile
2014-06-12 14:16:26  Large File Size: 0
2014-06-12 14:16:26  Getting native item
2014-06-12 14:16:26  Saved native item: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\Recombined\DS_RE Corporate day.msg
2014-06-12 14:16:26  Get DVS File and SIS Part files
2014-06-12 14:16:26  CIFS Partition: Lime Street Ptn6; Collected: true; FilePath: \\UKIT-VAULT01\EVPartition01cd082e2cf98400$\2012\04-23\C\034\C034BB15BF76AC22429A6D1EE543BB11.DVS
2014-06-12 14:16:26  Copying file from CIFS Partition: \\UKIT-VAULT01\EVPartition01cd082e2cf98400$\2012\04-23\C\034\C034BB15BF76AC22429A6D1EE543BB11.DVS
2014-06-12 14:16:26  ERROR: Failed to get DocFile. Error: Access is denied.  (0x80070005)
2014-06-12 14:16:26  CIFS Partition: Lime Street Ptn6; Collected: true; FilePath: \\UKIT-VAULT01\EVPartition01cd082e2cf98400$\2012\04-24\C\Collection14314.CAB
2014-06-12 14:16:26  Copying file from CIFS Partition: \\UKIT-VAULT01\EVPartition01cd082e2cf98400$\2012\04-24\C\Collection14314.CAB
2014-06-12 14:16:27  Get Vault Store Database records
2014-06-12 14:16:27  Saved database information item: C:\Program Files (x86)\Enterprise Vault\Reports\EVSVR\EVSVR_DumpSaveset_20140612141624\VSDBRecords.xml
2014-06-12 14:16:27  
2014-06-12 14:16:27  Completed operation with one or more errors. Review the log file for more information.
2014-06-12 14:16:27  
2014-06-12 14:16:27  Log file closed
2014-06-12 14:16:27  

Changing SQL back to point at the CAB file also works providing I leave the DVS in the original location as well.

If this was just a matter of a couple of items I'd grudingly do resolve it this way but we're talking over 500K items and I'd rather get it resolved this century.

If anyone's got any suggestions I'm all ears!

It's EV 10 SP1 BTW.....

Many Thanks

Jake

Operating Systems:

Comments 4 CommentsJump to latest comment

HanoBotha's picture

Hi Jake, 

Collected DVS files are recalled as .ARCHDVS files. This should also happen when you do the DumpSaveset.

It seems that your Vault Store records are intact. If EV can find the collection and the CAB, it seems to be failing when the file is being extracted as an .ARCHDVS File.

Did you exclude the ARCH* extensions from your anti-virus, or can you think of anything else that could prevent the extraction from the CAB file (available space?)

Jake_Knox's picture

Hi,

There's plenty of space on the drive and I don't think that the AV solution is interfering, it looks like there's an issue with the Cab file index so what I really need is a way to either repair them or uncollect.

Thanks

Jake

HanoBotha's picture

Hi Jake,

Is the partition configured for migration? I suppose not since you can find the .CAB files.

Was the .CAB files restored from backup?

To test your theory of corrupt .CAB file, you could run the following from a command prompt:

C:\Windows\System32\expand.exe <FULL PATH TO .CAB FILE> -D

The windows expand utility is usually located in the folder, but could be somewhere else depending on your OS

The -D option only list the files in the CAB file and does not extract them.

Please see:

Expand Utility

If this utility cannot list the files in the .CAB file, then you would know that the .CAB file is corrupt.

Jake_Knox's picture

Hi,

The CAB files have always been there. Through some very painful investigations using EVSVR I've found a list of the affected CAB files and DVS files, then using SQL have generated the folder path for each item and moved them back using Powershell.

I didn't need to make any changes in the Saveset table, it all started working normally :-)

SOLUTION