Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Enterprise Vault archives manually, but archiving task isn't working.

Created: 25 Apr 2013 • Updated: 25 Apr 2013 | 22 comments
This issue has been solved. See solution.

I have the EV Version 10.0.0.1316, Exchange 2010 SP2, both running on Windows 2008 R2 Enterprise SP1. Clients are using Outlook 2010.

If I try to archive an item manually, using the buttons on Outlook ribbon, it works fine.

I've configured the MB policy to archive items based on age, when they are older than 1 month, with no override settings.

Messages older than 1 month are not being archived. Logs gives no clues.

Any ideas?

Caio.

Operating Systems:

Comments 22 CommentsJump to latest comment

TonySterling's picture

Can you do a run now in report mode to see what that says?

Also, have you verified are not in backup mode when your schedule is running?

Suporte GP's picture
System Name
Mailbox name
Associated account
Mailbox state
Date
Start time
End time
No of archivable items
Total size of archivable items
No of archivable folders
No of items ready to archive
Size of items ready to archive
No of large items
Total size of large items
No of messages that would be archived Size of messages that would be archived
Quota limit
Quota used % of 
Quota free
Space held by existing pending items
Average size of shortcut (kB)
No of Expired Shortcuts
No of Orphaned Shortcuts
No of Old Shortcuts
No of Folders containing moved items
No of moved items identified
Archiving policy applied
 
*** SERVERNAME ***
*** CN of User ***
*** AD username ***
Enabled
4/25/2013
12:34:06 PM
12:34:14 PM
4
11
53
0
0
0
0
0
0
1203200
814125
32.34
Not Calculated
3.323
0
0
0
0
0
Default Exchange Mailbox Policy
 
 
About the schedule, my task also run at 12pm. And if I run manually, it should archive it, right?
Rob.Wilcox's picture

You have only 4 eligble items... and 0 of them will be archived.

Do you have 'archive unread items' enabled in your policy? Perhaps that is what is preventing the policy in applying.  Best bet = screenshots.

Suporte GP's picture

Yes, the option to archive Unread items is applied. Should I uncheck the option?

Untitled.png
TonySterling's picture

No, it simply appears there aren't any eligible items.  You have not by chance restored all the items to the mailbox have you?

If yes, you would need use IgnoreEVDates registry key. 

Next step would be to find the biggest mailbox and do a run now against it to see what happens.  You could also run a dtrace to see what it says.

Regard,

Suporte GP's picture

No, I don't.

I'm running a DTrace on select mailbox right now.

Edit: Sorry, but what this IgnoreEVDates Key does? I see there are four options: 

0 = Off
1 = Ignore Archived date
2 = Ignore Restored date
3 = Ignore both Archived and Restored date

Rob.Wilcox's picture

The IgnoreEVDates key only comes in to play if you have restored a bunch of data back to the mailbox and now want to rearchive it.

Have you done that?

Rob.Wilcox's picture

A few questions:

- which folder are the items in which you think should be archived but aren't?

- The above screenshot showed that 'archive unread' was selected, but, was that a recent change, as all the folders in that trace say that otherwise:

543 14:42:53.083 [168] (ArchiveTask) <3900> EV:M EFP - Folder Policy Settings for [Inbox]|  Filter Type = Using users default policy|  Archive Settings Locked = TRUE|  Override Locks = FALSE|  Delete Original = TRUE [LOCKED]|  Create Shortcut = TRUE [LOCKED]|  Archive unread items = FALSE [LOCKED]|  Archiving based on : Age [LOCKED]|  Age Based Period 1 Months|  Not using Size Priority Settings

I can see a ton of shortcut processing, but only one check to IsEligibleForArchive (and that results in the item being marked as non-archivable, because it is a draft):

26575 14:42:54.534 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::IsEligibleForArchive(/o=GP/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Edison Yamamura) |The message titled: CV Wellington will not be archived as it is Unsent  |
26576 14:42:54.534 [168] (ArchiveTask) <3900> EV:H :CArchivingAgent::IsEligibleForArchive() |Exiting routine |
 
Suporte GP's picture

1.) The folder is Inbox. I have an email from 03/10/2012, as an example.

2.) I've unchecked for a test only. But I've already checked again.

About your comment regarding shortcut processing and eligible for archiving, is it something with the configuration?

Rob.Wilcox's picture

1/ What is the subject of the mail?

2/ Well, this mail you're referring to .. is it a read or unread item?

Rob.Wilcox's picture

And unfortunately :

---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115550 to 115553 *****
115554 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date
---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115555 to 115564 *****
115565 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T
---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115566 to 115574 *****
115575 14:42:58.278 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'Re: Good nao estah atualizando os emails do meu inbox. Parou no dia 11/9!', size 3423 bytes
---- 14:43:00.181 [7272] (DTrace) <1992> EV~X ***** Trace buffer overflow. Trace entries lost: 115576 to 115584 *****
 
Were you doing a MON when running DTRACE so that you could see the progress to the screen?
 
Suporte GP's picture

1.) FW: GP Investments - voice calls

2.) It's a read item.

Edit: Sorry, but what is MON?

TonySterling's picture

So most likely you need to add the messageclass for voicemails.  That is probably why they aren't archiving.

See this post:

https://www-secure.symantec.com/connect/forums/arc...

Suporte GP's picture

Tony, that's just the subject of the message. It's a regular outlook message item.

Rob.Wilcox's picture

MON is what you can type in to a DTRACE window to monitor the output on screen. If you didn't run DTRACE from a command prompt then you won't know that.

There are two entries for GP Investments - voice calls.

One is RE

145529 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'Re: GP Investments - voice calls', size 3484 bytes
145530 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - shortcutexpiryperiod 1, deleteexpireditems F, orphanedshortcut T
145531 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T
145532 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date
145533 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12931} retention category matches [True]
145534 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12953} archive folder id matches [True]
145535 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12979} item has moved [False]
145536 14:42:59.541 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - 'Re: GP Investments - voice calls' has not moved so do checks to see if it is eligible for shortcut deletion
145537 14:42:59.541 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::ThinOrphanedShortcutCheck:#13232} Entry
145538 14:42:59.541 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::ProcessChunkOfShortcuts() |The shortcut titled: Re: GP Investments - voice calls will not be deleted |
 

One is on it's own:

145709 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - processing shortcut 'GP Investments - voice calls', size 2862 bytes
145710 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - shortcutexpiryperiod 1, deleteexpireditems F, orphanedshortcut T
145711 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - updatemoveditems T, udpateretcat 1, updateretcatuser T
145712 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - Using default ExpiryDateBasis: Archived Date
145713 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12931} retention category matches [True]
145714 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12953} archive folder id matches [True]
145715 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::IsAMovedItem:#12979} item has moved [False]
145716 14:42:59.557 [168] (ArchiveTask) <3900> EV:M CArchivingAgent::ProcessShortcutItem - 'GP Investments - voice calls' has not moved so do checks to see if it is eligible for shortcut deletion
145717 14:42:59.557 [168] (ArchiveTask) <3900> EV:M {CArchivingAgent::ThinOrphanedShortcutCheck:#13232} Entry
145718 14:42:59.557 [168] (ArchiveTask) <3900> EV:L :CArchivingAgent::ProcessChunkOfShortcuts() |The shortcut titled: GP Investments - voice calls will not be deleted |
 

There is no processing of FW: GP Investments - voice calls

It could be a difference in service pack, but your trace is a lot different to my 10.0.2 server.  To start with I don't see any : 'Processing msgs in folder' entries in your trace, and I do in mine, even when I run in report mode.

How did you run the task, when you did the trace?

Rob.Wilcox's picture

Can you add the message class column to Outlook...  and confirm what it is, and share a screenshot of your message classes tab on your policy?

SOLUTION
Suporte GP's picture

Hm, Rob, interesting. Didn't know I'm able to check the message class from Outlook. I've added the fields to EV, and now in report mode I have a different status, even though isn't working yet on clients.

System Name Mailbox name Associated account Mailbox state Date Start time End time No of archivable items Total size of archivable items No of archivable folders No of items ready to archive Size of items ready to archive No of large items Total size of large items No of messages that would be archived Size of messages that would be archived Quota limit Quota used % of Quota free Space held by existing pending items Average size of shortcut (kB) No of Expired Shortcuts No of Orphaned Shortcuts No of Old Shortcuts No of Folders containing moved items No of moved items identified Archiving policy applied
 
*SERVER NAME* *CN of the user* *Username* Enabled 4/25/2013 5:00:59 PM 5:01:11 PM 379 145567 46 16 7820 0 0 16 7820 Undefined 381626 Undefined Not Calculated 3.433 0 0 0 0 0 Default Exchange Mailbox Policy
 
Edit: About the trace, I've added the trace from Advanced Features, created a new trace from Mailbox archiving issues, and given a random name to it.
Rob.Wilcox's picture

No of archivable items : 379

Total size of archivable items : 145567

No of archivable folders : 46

No of items ready to archive: 16

So you now have 16 items ready to archive..

What message class was the item that you mentioned earlier? What did you have to add to the message classes tab?

And you probably need to gather another DTRACE unless you now have an understanding of what is happening, and are okay?

TonySterling's picture

To add the message class field in Outlook do this:

  1. Right-click the column-header in the view, and then click Field Chooser on the shortcut menu.
  2. In the Field Chooser list, click to select All Message Fields.
  3. Drag the Message Class field to the view column-header to add the field as a column.
Suporte GP's picture

Rob,

Yes, I thought IPM.Note* was something with Notes from Outlook, not the actual message. Thought was a default behavior to archive mail messages. Anyway, it is working now after running the task against this mailbox.

Thank you, I'll mark as solution.

Thank you too, Tony!

Regards,

Caio.

Rob.Wilcox's picture

Glad to help, and glad you got it sorted out.  Messages classes can be a little known gotcha if you're not used to the messaging world.