Video Screencast Help
Search Video Help Close Back
to help

Archiving and eDiscovery Community Blog

Showing posts in English
U.S. Justice Department Approves Use of Predictive Coding on Case
Symantec Tom K | 30 May 2013 | 2 comments

As you may have seen, recently the U.S. Justice Department approved a request to use predictive coding eDiscovery software, to sort through documents in the merger of Anheuser-Busch InBev and Grupo Modelo. Typically, cases as large as these require legal counsel to sift through millions of electronic documents in search of relevant information—an endeavor that is not only time consuming, but extremely expensive.

But innovative eDiscovery software has now reached a level of sophistication whereby computers can be trained to hunt for concepts the same way human lawyers do.

In the Anheuser-Busch case, the opposing sides discovered hundreds of thousands of documents using eDiscovery software—and spent 50% less than they would have using traditional methods. (And when 50% equates to a few million dollars—it’s easily enough to turn the heads of government agencies, their IT departments, and their legal counsel.)

Having given predictive coding...

Read more
Windows Search and Enterprise Vault
Rob.Wilcox | 30 May 2013 | 0 comments

 

Alot has been written about Windows Search and how it works, or not, with Enterprise Vault.  The main issue comes about because you can get into a mixed bitness configuration.  By that I mean Windows 7 64 bit, with Office 2010 32 bit.  This causes problems.
 
Outlook Instant Search - What does it search?
 
Outlook Instant Search only ever searches the Enterprise Vault Virtual Vault Metadata cache. This is on top of Outlook items. The Enterprise Vault metadata that can be searched using Instant Search is things like the date, author, recipients, subject, and up to 120 characters of the message body.  This therefore excludes things like the full body content, and excludes attachments.
 
How can I search full content?
 
...
Read more
Retrieving an Item using the Enterprise Vault Outlook Add-in
Rob.Wilcox | 26 May 2013 | 0 comments

 

Retrieving an item in Enterprise Vault's Outlook Add-in is of course one of the most common activities that take place day-in and day-out in an archived email environment.  It is interesting to know what it actually involves, so let's take a look at the process undertaken with the Enterprise Vault 10.0.3 Outlook Addin ....
 
When logging is set to the default level of 'Information' then nothing is logged in the Outlook Add-in client log file.  On the Enterprise Vault server, the IIS logs will show the retrieval was performed (and of course DTRACE can prove it too):
 
 
2013-04-05 23:59:59 192.168.145.167 GET /EnterpriseVault/download.asp VaultID=18A5257C941B9A84F8A6CA597937F3B611110000evsql.ev.local&SaveSetID=201304287177491~201304081913380000~Z~D006154F7F2EA1F13C9DC57A4D6D4C81&FormatType=Unicode&Client=EV10.0.3.1090-Outlook14&Format=MUD&AttachmentID=0...
Read more
$9 Million for Email 'Failures'
TonySterling | 25 May 2013 | 2 comments

I stumbled across this article the other day. LPL Fined $9 Million for Email 'Failures' here http://online.wsj.com/article/SB10001424127887323648304578497054039151168.html and also http://www.businessweek.com/ap/2013-05-21/lpl-to-pay-9-million-to-settle-email-archive-case

Some excerpts from the WSJ article:

Recently LPL Financial Holdings Inc. agreed to pay at least $9 million to end allegations by regulators that the brokerage firm was plagued by "systemic email failures" but did too little to fix them.

and this one:

The breakdowns included failing to review more than 28 million emails sent or received by thousands of brokers. That meant LPL didn't keep sufficient...

Read more
How to export multiple Enterprise Vault mailbox archives at once
Rob.Wilcox | 24 May 2013 | 0 comments

 

When you use Enterprise Vault to export mailbox archives back to the original location or out to a PST file, Enterprise Vault processes the requests sequentially. This means that if you have a list of 10 or 20 or 100 mailbox archives that you want to export it can take some time to process them all. Below I'll describe an option to export them in parallel. It should be noted however that doing this may not mean that they are exported any faster, as there are other limits which will come in to play, such as storage speed and so on.

As mentioned above, the export process goes through each requested mailbox sequentially:

Image_6.png

And that can take some time... especially if one or more of the mailbox archives is very large. The smaller exports then get stuck behind the big one.

What you can do though is when the first export starts running, you can click on...

Read more
How do you like your Technotes in the morning?
Rob.Wilcox | 23 May 2013 | 0 comments

 

I stumbled across something the other day, and thought it was worthy of sharing with the community.  The question comes down to:

How do you like your Technotes in the morning?

 

Do you view them as-is on the Symantec website like this:

2013-05-23_09h12_30.png

Do you use an extension in your browser like Evernote Clearly:

2013-05-23_09h12_39.png

Or Readability:

2013-05-23_09h13_03.png

Well, a neat way without any kind of extension is the print-only view:

...

Read more
Build up of Temp files on Enterprise Vault Server?
Rob.Wilcox | 21 May 2013 | 0 comments

 

Have you ever had a strange build up of temporary files on your Enterprise Vault Server?  Strange in that they're all the same size, and appear in a long row of sorts? Well the explanation might be that Enterprise Vault is trying to process a problem message.  The situation is described in this technote:

http://www.symantec.com/docs/TECH206368

I know that issues like this are super tricky to find, and to fix, but really this could lead to quite a bad situation on your Enterprise Vault server. Have you ever had any issues with stuck/problematic messages, let me know in the comments below:

Read more
Enterprise Vault 10.0.3 cumulative hotfix 2 release
Rob.Wilcox | 17 May 2013 | 0 comments

 

The second cumulative hotfix following from Enterprise Vault 10.0.3 has been released. More details are available from the following technote:

http://www.symantec.com/docs/TECH205731

The readme file which is linked to the technote shows you the differences between Cumulative Hotfix 1, and Cumulative Hotfix 2 (which is quite nice). So if you're afflicted by any Enterprise Vault 10.0.3 issues, take a look through the release notes and see if there is something which addresses your issue.

 

Read more
Exporting an Enterprise Vault archive - what then?
Rob.Wilcox | 16 May 2013 | 0 comments

 

I've seen many questions on this topic from the Symantec Connect forums... People wonder what happens when an archive is exported back to Exchange, or out to a PST file. Some, well, many people, expect that exporting the archive does what the name implies: 'Moves' all the data back to the chosen location. That's not the case though. When you export an archive, the items in the archive remain unchanged.

There is one subtle exception. As you can see from this screenshot if you export all items you don't get any delete options:

Image_5.png

On the other hand if you 'export all items from this root folder path' and choose from the root (ie \) folder you can have the option to delete the archived items too:

Image1_0.png

But in general terms, exporting...
Read more
Enterprise Vault and PartitionSecuredNotification.XML
Rob.Wilcox | 13 May 2013 | 0 comments

 

In a previous blog I mentioned that there are effectively two trigger file mechanisms, the PartitionSecuredNotification.XML is the new kid on the block having only been introduced in Enterprise Vault 8. The file has a specific format, and is something that needs to be created by your backup software.  The file looks like this:
 
<?xml version="1.0" encoding="utf-8" ?>
  <PartitionSecuredNotification
  xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance
  xsi:noNamespaceSchemaLocation="PartitionSecuredNotification.xsd">
  <VendorName>required free form string</VendorName>
  <VendorAppType>required free form string</VendorAppType>
  <PartitionSecuredDateTime> 2008-03-25T09:30:10+05:30 </PartitionSecuredDateTime>
  <VendorTransactionId>optional...
Read more