You can use Log Parser for a huge variety of things, including looking at Enterprise Vault data.

Grab a copy from :

http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en

After installing that you can write some fairly powerful queries rapidly.  Here are a couple of examples :-

LogParser.exe -i:EVT -o:CSV "select DISTINCT ComputerName,EventLog,EventID,EventTypeName,EventCategoryName,SourceName,Strings,Message into C:\testev1.csv FROM '\\evault1\Symantec Enterprise Vault' WHERE (EventTypeName = 'Error event' AND EventID NOT IN(13360;6796)

And

LogParser.exe -i:EVT -o:CSV "select DISTINCT...

There are many uses for Process Monitor, the former Sysinternals tool, now developed at Microsoft.  One such use is to see which process or executable loaded a particular DLL – and what version it is.

First of all you can get Process Monitor from this link :

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

You can run the binary on either an x86 or x64 system.  When you run it on an x64 system, an x64 .exe is actually spawned from inside the x86 version – which is quite neat.

The main interface looks like this :

You’ll see all sorts of useful information such as who the binaries belongs to, process ID’s, memory usage (private byes), CPU usage and so on.

You...

In the Event Viewer on my normal Enterprise Vault repro server, I was rather startled to get a pop-up when I clicked on the Help and Support hyperlinks :

So it says to start the Help and Support service.  Fine…. I thought.  I looked in the Services MMC but I can’t see Help and Support :

After a bit of searching on the Internet I found this article. I did the fix which is mentioned in there :-
start /w helpsvc /svchost netsvc /regserver /install

After that the Services MMC looks like this :

If I start the Help and Support service, the links now work. So it seems that it’s not just related to Small Business Server, it’s all Windows 2003 SP 2 installs, perhaps.<...

Summary of How Quota Based Archiving Works

Quota based archiving will keep a users mailbox below the limit set on the Mailbox through Microsoft Exchange. For example if you have “Issue Warning at 200MB” and the Enterprise Vault policy applying to that particular user is to keep 20% Storage Limit Free then Enterprise Vault is tasked with keeping the mailbox at or below 160MB.

Enterprise Vault has a wealth of different setting that can be configured and the setting to keep 20% Storage Limit Free is only one of those. In brief the following is configurable.

- Archive Unread Items - Yes/No
- Archive Deleted Items – Yes/No
- Message Class of Items to Archive – Configurable.
- Shortcut Expiry
- Start with Items Larger Than – Configurable
- Never Archive Items Younger Than – Configurable.

Events

You may see the following Event at times for...