After upgrade to version 7.1.2 , the application is no longer able to collect from Enterprise Vault. [ 440,852 Searcher exited with non-zero error code ]

Article:TECH204315  |  Created: 2013-03-26  |  Updated: 2013-04-14  |  Article URL http://www.symantec.com/docs/TECH204315
Article Type
Technical Solution


Issue



After upgrade to version 7.1.2 , running a collection from Enterprise Vault fails before the search with an error: 440,852 Searcher exited with non-zero error code.

 


Error



[#422300] EV searcher error - 440,852 Searcher exited with non-zero error code.

 


Cause



In version 7.1.1 and earlier, the Enterprise vault (EV) search criteria is written to a temporary location on the Clearwell appliance and deleted upon completion of the search.

In version 7.1.2 base and FIX1, the EV search criteria is written to the Destination by the account that starts the EsaEvCrawlerService on the Clearwell appliance.  This required the account to have Write permissions on the Destination server. 

In version 7.1.2 FIX2, the account that starts the EsaApplicationService writes the EV search criteria and the Source Account associated with the EV Source requires only Read permissions on the Destination server. 

By design in version 7.1.2 and above, the EV search criteria is written with the collection task result for defensibility.  The search criteria is used by the Collection Task in order to submit the request to the Enterprise Vault Indexing Engine.  This will require the Source Account associated to the EV Source, a minimum Read permission on the Destination server. 

 


Solution



If running version 7.1.2 base or FIX1, assign Read/Write permissions for the account that starts the EsaEvCrawlerService.

If running version 7.1.2 FIX2, assign the Account Source associated with the EV Source, Read permissions on the Destination server. 

 




Article URL http://www.symantec.com/docs/TECH204315


Terms of use for this information are found in Legal Notices