Enterprise Vault™ Monitoring Enterprise Vault
- Monitoring Enterprise Vault
- Enterprise Vault locations
- Enterprise Vault Directory database
- Vault Store Group fingerprint database
- Vault Store database
- Vault Store
- Vault Store partitions
- Index locations
- IIS Service
- About monitoring IIS
- Web site connectivity: Enterprise Vault
- Web site connectivity: Enterprise Vault API
- Web site connectivity: Enterprise Vault indexing
- Web site connectivity: Enterprise Vault search clients
- Web site connectivity: Enterprise Vault search server
- Web site connectivity: FSA Reporting
- Web site connectivity: Enterprise Vault Monitoring
- Enterprise Vault services
- Monitoring Enterprise Vault tasks
- Monitoring Enterprise Vault event logs
- Enterprise Vault performance counters
- About performance counters
- Enterprise Vault Classification
- Enterprise Vault Database Files
- Enterprise Vault Databases
- Enterprise Vault::Directory
- Enterprise Vault Disk Location
- EnterpriseVault::Domino Journaling
- EnterpriseVault::Exchange Journaling
- Enterprise Vault IMAP Storage
- Enterprise Vault IMAP Storage operations
- Enterprise Vault Index Query Server
- Enterprise Vault Indexing
- Enterprise Vault Indexing Volumes Processing
- Enterprise Vault Partitions
- Enterprise Vault Skype for Business Archiving
- Enterprise Vault SMTP Archiving Task
- Enterprise Vault SMTP Holding Folder
- Enterprise Vault SMTP Service
- Enterprise Vault Storage
- Enterprise Vault::Vault Store Group
- Enterprise Vault::Vault Stores
- Enterprise Vault Websites
- Enterprise Vault Indexing Volumes Processing
Monitoring event logs
This section lists Enterprise Vault critical events. Many of these events require the administrator to take some action. Some of the events are informational, such as those that indicate that a service has started.
The value in the Version column denotes the Enterprise Vault version that the event log was added in. A hyphen (-) indicates that the event log was added in Enterprise Vault 11.0.1 or earlier releases.
Table:
Event | Title | Added |
|---|---|---|
2209 | Failed to initialize the MAPI sub-system. | - |
2210 | Failed to initialize the COM sub-system. | - |
2214 | Agent message dispenser failed to start. | - |
2246 | An error occurred opening the Journal mailbox mailbox. The Journal Task will shut down. | - |
2247 | An error occurred whilst processing the Journal mailbox mailbox, this mailbox is disabled or suspended from archiving, the Journal Task will shut down. | - |
2249 | Could not create the "queueName" Queue, call returned errorText. | - |
2250 | Could not Open the "queueName" Queue for reading, call returned errorText. | - |
2251 | Could not Open the "queueName" Queue for writing, call returned errorText. | - |
2252 | Could not Locate the "queueName" Queue, call returned errorText. | - |
2256 | The Archiving Task 'taskName' could not be started due to startup errors. | - |
2257 | The Retrieval Task 'taskName' could not be started due to startup errors. | - |
2258 | The Journal Task 'taskName' could not be started due to startup errors. | - |
2259 | Could not open mailbox mailboxName, mailbox will not be processed. | - |
2262 | Error processing archiving request for system name. | - |
2276 | The dispenser will shut down due to an unrecoverable error. | - |
2304 | Failed to lookup Message Queue name for the agentName Agent in the Directory Service on computer computerName. | - |
2737 | The TaskController failed launch the AgentClientBroker.Exe with the following error errorText, the service will shut down. | - |
2748 | The Task failed to start as a null Site Account Domain Name was specified. | - |
2749 | The Task failed to start as a null Site Account name was specified. | - |
2750 | The Task failed to start as a null Exchange Server name was specified. | - |
2751 | The Task failed to start as a null Exchange Mailbox name was specified. | - |
2753 | The Task failed to start as a null default filter was specified. | - |
2754 | Task 'taskName' failed to start because there is no default Retention Category. | - |
2757 | The service failed to start as a null schedule was specified. | - |
2823 | The Journal mailbox, mailboxName, has exceeded its storage quota limits. The Journal Task will shut down. Please remove all storage quota limits from this mailbox. | - |
2851 | There is not enough free disk space to continue. | - |
2853 | There are not enough resources available to continue. | - |
2854 | An unrecoverable error occurred. There is a problem with one of the disks. | - |
2949 | The Public Folder Task 'taskName' could not be started due to startup errors. | - |
3027 | Error reading the legacy message store and mailbox distinguished names from active directory for mailbox mailboxName. | - |
3038 | Unable to determine the version of the Exchange server serverName, the Task will shut down. | - |
3039 | Could not get a MAPI session from the session pool whilst retrieving an item to a mailbox. | - |
3040 | CMailboxHelper::CreateSession() has failed to create a pointer to a MAPI Session. | - |
3041 | CMailboxHelper::CreateSession() has been passed invalid parameters. | - |
3077 | Unable to determine the version of the Exchange server serverName, the Task will shut down. | - |
3078 | Unable to determine the version of the Exchange server serverName, the Task will shut down. | - |
3079 | Unable to determine the version of the Exchange server serverName, the Task will shut down. | - |
3080 | The version of the Exchange server serverName is not compatible, the Task will shut down. | - |
3087 | An error occurred during Task Initialization, the Task has shut down. | - |
3144 | The agent will now shut down as it cannot reliably continue. | - |
3150 | This Task will now shut down. | - |
3229 | A Journal mailbox has a backlog of messages held in its Inbox. | - |
3231 | Could not get a MAPI session from the session pool. | - |
3284 | A recoverable error was detected, the dispenser has been asked to sleep. | - |
3289 | Task Controller Service started (version). | - |
3290 | Task Controller Service stopped. | - |
3294 | The Public Folder Task 'taskName' against taskTarget has stopped. | - |
3295 | The Journal Task 'taskName' against taskTarget has stopped. | - |
3296 | The Archiving Task 'taskName' against taskTarget has stopped. This is a normal shut down, no action is required. | - |
3297 | The Archiving Task 'taskName' against exchangeServer has started (versionNumber). | - |
3298 | The Journal Task 'taskName' against exchangeServer has started (versionNumber). | - |
3299 | The Public Folder Task 'taskName' against exchangeServer has started (versionNumber). | - |
3300 | The Task 'taskName' failed to start due to incorrect user permissions. | - |
3301 | The Task 'taskName' failed to start, probably due to incorrect user permissions. | - |
3305 | The Task 'taskName' failed to log on to Exchange server 'exchangeServer' using mailbox 'mailboxName'. | - |
3311 | SMTP Mail Archiving has started successfully. | - |
3312 | SMTP Mail Archiving encountered a serious error during initialization and is unable to operate correctly. | - |
3313 | SMTP Mail Archiving encountered a serious error resulting in the loss of a message. | - |
3314 | SMTP Mail Archiving failed to save a captured message because the disk is full. Retry will occur every number seconds until the message is saved. This may result in a backlog of messages in the SMTP queue. | - |
3320 | // SMTP Mail Archiving failed to load because a valid license key is not installed. Incoming messages will not be captured and will be delivered to the SMTP drop directory or relayed to another server. | - |
3329 | The task controller cannot start the following MAPI-dependent tasks because the required version of MAPI is missing or incorrectly configured on Enterprise Vault server. | - |
3360 | The Exchange Server name is running Exchange Server version 5.5. This version of Exchange Server is not supported by Enterprise Vault. The task will shut down. | - |
3391 | Could not open mailbox. Shortcut processing aborted. | - |
3410 | The task failed to log on to the Exchange Server. The task is running as a Windows user that is a member of the 'domain admins' group. Remove the user from this group to ensure that the task has sufficient access to the Exchange Server. | - |
3414 | An Enterprise Vault task is not correctly configured. | - |
3415 | An Enterprise Vault task is not correctly configured. | - |
3416 | An Enterprise Vault task is not correctly configured. | - |
3418 | An unsupported Microsoft Outlook version has been detected. | - |
3422 | An Enterprise Vault task is not correctly configured. | - |
3460 | The Task 'taskName' failed to log on to Exchange server 'exchangeServer' using mailbox 'mailboxName'. | - |
3460 | The Task 'taskName' failed to log on to Exchange server 'exchangeServer' using mailbox 'mailboxName'. | - |
3465 | An unsupported Microsoft Outlook version has been detected. | - |
3466 | The Exchange Public Folder Task is targeting an Exchange 2013 server but no public folder mailboxes have been created in the organization. | - |
3467 | No mailboxes on the Exchange Server will be archived. The request will be retried on the next run of the archiving task. | - |
3471 | Cannot determine the version of Microsoft Outlook that is installed on the Enterprise Vault server because Windows Management Instrumentation Service is not running. | - |
3481 | Could not determine which version of Outlook is installed. This error may be caused by a Windows Management Instrumentation (WMI) problem. | - |
3488 | The version of Outlook is not supported when archiving from the selected Exchange Server. You must upgrade to a supported Outlook version before you can archive from this Exchange Server. | 12.0 |
3489 | The current Exchange server version is not a supported archiving target. | 12.0 |
4110 | The Admin Service has successfully completed its preliminary checks and has started (versionNumber). | - |
4111 | The Admin Service has stopped. | - |
4140 | Insufficient Virtual Memory is available for Enterprise Vault to run. | - |
4141 | Insufficient diskspace is available on drive drive for Enterprise Vault to run. | - |
4142 | Insufficient diskspace is available for Enterprise Vault to run. | - |
4143 | Insufficient Diskspace is available on drives drive and drive for Enterprise Vault to run. | - |
4144 | The system is running out of Virtual Memory - free memory by closing any unwanted applications. | - |
4145 | The system is running out of diskspace on drive drive - delete any unwanted files. | - |
4146 | The system is running out of diskspace - delete any unwanted files. | - |
4147 | The system is running out of diskspace on drives drive and drive - delete any unwanted files. | - |
4166 | An unhandled access violation has occurred. | - |
4183 | There have been more than number Errors in the last number seconds, of which number or more are from Enterprise Vault. | - |
4197 | The system is running out of diskspace on drive drive - delete any unwanted files. | - |
4198 | The system is running out of diskspace - delete any unwanted files. | - |
4199 | The system is running out of diskspace on drives drive and drive - delete any unwanted files. | - |
4207 | The Enterprise Vault services cannot start because an error has occurred writing a required setting to the registry. | - |
4212 | Enterprise Vault is configured in a cluster. You must use the cluster software to bring the service online. | - |
4214 | License checking has identified that you currently do not have any licensed features. | - |
4217 | Required license not installed. An Enterprise Vault license is required for the following feature but the license is not installed. | - |
4218 | Required license not active. An Enterprise Vault license is required for the following feature but the installed license is not currently active. | - |
4219 | Failed to install license file. | - |
4221 | Failed to look up the anonymous user account. | - |
4222 | The anonymous user account is not valid | - |
4223 | Authentication is currently being delayed due to a suspected brute-force attack. | - |
4226 | // An unsupported version of Microsoft Outlook is installed on this server. All services and tasks will continue to run but you may experience issues during archiving and retrieving of Exchange Server items. | - |
4254 | Summary Event Log entries have been suppressed recently. | - |
4255 | Summary Event Log entries have been suppressed recently. | - |
4257 | The Event Filter is active and its configuration has been updated. | - |
4258 | The Event Filter has been deactivated and will no longer filter Enterprise Vault events from the Event Logs. | - |
4259 | The Event Filter has been deactivated and will no longer filter Enterprise Vault events from the Event Logs. | - |
4266 | The simple thread is running number seconds after the exit request. | - |
4273 | Process failed. | - |
4275 | An Enterprise Vault license is required for the IMAP Server to be fully operational. | - |
4293 | Enterprise Vault SMTP Service registration error. | 12.2 |
4294 | Clustered Enterprise Vault SMTP Service not online. | 12.2 |
4296 | Enterprise Vault SMTP service not installed on cluster node. | 12.2 |
4297 | Enterprise Vault SMTP service detection failed on cluster node. | 12.2 |
4298 | Enterprise Vault SMTP cluster configuration error. | 12.2 |
4312 | Audit categories not enabled at site-level | 12.4 |
4313 | Audit categories not enabled at server-level | 12.4 |
4314 | Centralized categories not selected | 12.4 |
5186 | The Shopping Service has started (versionNumber). | - |
5187 | The Shopping Service cannot perform the requested MAPI dependent operation because the required version of MAPI is missing or incorrectly configured on the Enterprise Vault server. | - |
5230 | The Shopping Service cannot perform the requested MAPI dependent operation because the required version of | - |
6221 | Storage Service started (versionNumber). | - |
6222 | Storage Service stopped. | - |
6517 | Error restarting Storage Management. | - |
6655 | Process failed. | - |
6681 | Process stopped. | - |
6977 | The MigratorServer cannot start because the required version of MAPI is missing or incorrectly configured on the Enterprise Vault server. | - |
7014 | The NSF MigratorServer is unable to initialize the Notes runtime system. | - |
7046 | Unable to set Vault Store Backup Mode. | - |
7058 | Successfully set Backup Mode on Vault Store. | - |
7059 | Successfully set Backup Mode on all the Vault Stores in the Vault Store Group that are managed by the Storage Service on this computer. | - |
7060 | Successfully set Backup Mode on all the Vault Stores that are managed by the Storage Service on this computer. | - |
7077 | Legacy registry values are in use. Enterprise Vault has a new method of backing up Vault Stores that cannot be used until you remove this registry value. | - |
7079 | Successfully cleared Backup Mode from Vault Store. | - |
7080 | Successfully cleared Backup Mode from all the Vault Stores in the Vault Store Group that are managed by the Storage Service on this computer. | - |
7081 | Successfully cleared Backup Mode from all the Vault Stores that are managed by the Storage Service on this computer. | - |
7082 | Unable to clear Vault Store Backup Mode. | - |
7098 | A locking error has occurred. | - |
7162 | You are recommended to create a new SQL index for this vault store database to improve the performance of processing items in the Centera collection area. | - |
7168 | The Indexing Service has started (versionNumber). | - |
7169 | The Indexing Service has stopped. | - |
7184 | Could not invoke Index Server. | - |
7206 | A locking error has occurred in lock : number . | - |
7207 | Could not initialize lock: lock. | - |
7243 | The index data could not be committed to disk. | - |
7252 | The AltaVista Index is full. No more data can be stored in this index. | - |
7292 | The index volume has been marked as failed. | - |
8192 | The Directory Service has started (versionNumber). | - |
8193 | The Directory Service has stopped. | - |
13397 | The connection 'connectionName' was lost and the system is waiting to reconnect (Thread Id: threadName). | - |
13397 | The connection 'connectionName' was lost and the system is waiting to reconnect (Thread Id: thread). | - |
16385 | The SPS Archive service for sharepointServer has started (versionNumber). | - |
16386 | The SPS Archive service for taskTarget has stopped. | - |
16397 | An unrecoverable error has occurred, the service will be shut down. | - |
16426 | The SPS Pruning Service has started. | - |
16427 | The SPS Pruning Service has stopped. | - |
16432 | The SPS service cannot start because the required version of MAPI is missing or incorrectly configured on the Enterprise Vault server. | - |
20481 | The Enterprise Vault File Placeholder service has started (versionNumber). | - |
20482 | The Enterprise Vault File Placeholder service has stopped. | - |
20484 | The Enterprise Vault File Placeholder Service failed to start because the Enterprise Vault file system filter driver is not installed. | - |
20497 | Error in the automatic proxy configuration script. | - |
20501 | The server is requesting client authentication. | - |
20503 | The connection with the server has been terminated. | - |
20504 | The connection with the server has been reset. | - |
20540 | The wrong version (installedVersion) of evmf.sys is installed. Version requiredVersion is required. | - |
29000 | Item has not been added to the storage queue because the queue has reached its maximum length. | - |
29002 | The storage queue is closed. | - |
29005 | The storage queue location 'location' is not accessible. | - |
29013 | Item has not been added to the storage queue because the remaining disk space of the queue has breached its. | - |
29017 | The last collection identity generated on disk for this vault store is higher than the highest collection. | - |
29058 | Failed to process an item from the Storage Queue. The item has been moved into the Storage Queue's failed. | - |
29059 | Could not process an item from the Storage Queue because the queue file does not exist. | - |
40966 | Various. | - |
40968 | Various. | - |
40972 | Various. | - |
40975 | Various. | - |
40976 | Various. | - |
40977 | Various. | - |
40978 | Various. | - |
40979 | Various. | - |
40980 | Various. | - |
40982 | Various. | - |
40997 | Various. | - |
41008 | Various. | - |
41011 | Various. | - |
41012 | Various. | - |
41013 | Various. | - |
41014 | Various. | - |
41015 | Various. | - |
41016 | Various. | - |
41020 | Various. | - |
41021 | Various. | - |
41022 | Various. | - |
41023 | Various. | - |
41024 | Various. | - |
41035 | Various. | - |
41036 | Various. | - |
41037 | Various. | - |
41042 | Various. | - |
41045 | Various. | - |
41046 | Various. | - |
41047 | Various. | - |
41049 | Various. | - |
41050 | Various. | - |
41051 | Various. | - |
41052 | Various. | - |
41053 | Various. | - |
41054 | Various. | - |
41059 | Various. | - |
41060 | Various. | - |
41061 | Various. | - |
41062 | Various. | - |
41066 | Various. | - |
41067 | Various. | - |
41069 | Various. | - |
41082 | Various. | - |
41110 | Various. | - |
41129 | Various. | - |
41133 | Various. | - |
41203 | Various. | - |
41204 | Various. | - |
41205 | Various. | - |
41206 | Various. | - |
41207 | Various. | - |
41257 | Various. | - |
41258 | Various. | - |
41259 | Various. | - |
41260 | Various. | - |
41261 | Various. | - |
41262 | Various. | - |
41263 | Various. | - |
41264 | Various. | - |
41265 | Various. | - |
41266 | Various. | - |
41267 | Various. | - |
41268 | Various. | - |
41282 | Various. | - |
41285 | Various. | - |
41286 | Various. | - |
41287 | Various. | - |
41289 | Various. | - |
41290 | Various. | - |
41291 | Various. | - |
41292 | Various. | - |
41293 | Various. | - |
41306 | Various. | - |
41308 | Various. | - |
41317 | Various. | - |
41318 | Various. | - |
41319 | Various. | - |
41321 | Various. | - |
41329 | Various. | - |
41338 | Various. | - |
41344 | Various. | - |
41366 | Various. | - |
41367 | Various. | - |
41443 | Various. | - |
41444 | Various. | - |
41445 | Various. | - |
41446 | Various. | - |
41447 | Various. | - |
41448 | Various. | - |
41449 | Various. | - |
41468 | Various. | - |
41470 | Various. | - |
41488 | Various. | - |
41490 | Various. | - |
41492 | Various. | - |
41541 | SMTP Archiving task taskname could not load targets or targets are not yet added. | 12.2 |
41558 | Various. | - |
41559 | Various. | - |
41560 | Various. | - |
41561 | Fragmentation warning for indexes of 'database' on SQL server instance 'instanceName'. | - |
41567 | The Enterprise Vault SMTP service configuration is changed to listen to another port. | 12.0 |
41569 | The Enterprise Vault SMTP holding folder location is changed. Email messages stored in the previous SMTP holding folder will not be processed. | 12.0 |
41573 | Various. | - |
41576 | The Enterprise Vault SMTP holding folder is removed and will no longer receive email messages. | 12.0 |
41577 | Various. | - |
41578 | Various. | - |
41581 | The Compliance Sampling process cannot access the Compliance Accelerator customer database. | 12.0 |
41582 | The Compliance Sampling process is unable to read the latest configuration changes made to the Compliance Accelerator customer database. Any customer configuration changes, such as department memberships, made since the last refresh are not applied to Compliance Accelerator sampling until the customer configuration is successfully refreshed again. | 12.0 |
41583 | Various. | - |
41584 | Various. | - |
41585 | The IMAP server was unable to connect to the storage server. | 12.0 |
41606 | The SQL command has executed successfully after connection to a SQL server is restored. | 12.0 |
41616 | Lists all the Enterprise Vault databases that are accessible through a SQL listener, but have not yet been added to a SQL AlwaysOn availability group. | 12.0 |
41619 | Connection to the SQL server is temporarily broken. SQL commands will be retried after the connection is restored. | 12.0 |
41620 | The Veritas Information Classifier plug-in for Microsoft File Server Resource Manager returned an error. | 12.0 |
41623 | Folder shortcut URL unknown. | 12.1 |
41624 | Folder shortcut icon file location unknown. | 12.1 |
41626 | DSS Database script error. | 12.2 |
41644 | The SMTP Provisioning task failed to read the required information from Active Directory. | 12.3 |
41646 | The SMTP Provisioning task failed to process a provisioning group. | 12.3 |
45057 | The Enterprise Vault NetApp File Placeholder service has started. | - |
45058 | The Enterprise Vault NetApp File Placeholder service has stopped. | - |
45073 | An unrecoverable error has occurred, the service will be shut down. | - |
45077 | The slave process for the NetApp placeholder named: name is not responding and will NOT be restarted as it has exceeded number restarts in number minutes. | - |
45079 | The slave process for the NetApp placeholder server named: name has requested a restart but will NOT be restarted as it has exceeded number restarts in number minutes. | - |
45080 | The NetApp placeholder server for Filer: filer failed to configure FPolicy, error: error, the placeholder server will shutdown. | - |
45081 | The NetApp placeholder server for Filer: filer failed to start as the filer does not support Manage ONTAP V7.0. | - |
45084 | The NetApp C-Mode placeholder server for vserver: name failed to configure FPolicy. | - |
45085 | The NetApp placeholder server failed to detect the version for Filer: name. | - |
45090 | Failed to communicate through the privileged data access channel of the fileserver name. Restarting the NetApp placeholder process for the NetApp C-Mode file server. Restarting the NetApp. | - |
45092 | Failed to update the Vserver UUID for the NetApp C-Mode Vserver. | 12.1 |
45336 | The Data Classification Client could not connect to any of the Data Classification Servers configured. | - |
45341 | The Data Classification Client has not been configured properly. | - |
45827 | Various. | - |
45828 | Various. | - |
45829 | Various. | - |
45830 | Enterprise Vault SMTP message tracking error. | 12.2 |