Unable to delete Archives in Enterprise Vault

book

Article ID: 100001607

calendar_today

Updated On:

Description

Error Message

Event Type:    Warning
Event Source:    Enterprise Vault
Event Category:    Storage Delete
Event ID:    7113
Description:
Following archive could not be deleted as it contains items that are on hold, or their retention category does not allow deletions, or a compliance device retention period prevents them from being deleted.
 Archive Name = ...
 Archive Entry Id = ...
 Total items on hold = ...

Resolution

Following enhancements requests, the ability for an EV administrator to delete an Archive has been removed from EV versions 8.0 and up if there are items in the Archive that are on Legal Hold in a DA case. An attempt to delete such an Archive will  result in the Warning Event Log entry as above.

In versions of EV prior to 8.0, an Archive could be deleted by an administrator with the Vault Service Account (VSA)  credentials if items within the Archive were on Legal Hold. The entire Archive could be deleted from the VAC in EV versions  prior to 8.0 with the following caveat: when the Archive was selected for deletion, the following prompt was displayed:

 

The prompt advises that: "Deleting an archive permanently removes the archive and all items stored in it.
This action will override any form of deletion protection applied to items or Retention Category.
Once you click 'Yes' you cannot cancel the deletion."

It allows an option to cancel the Archive deletion process by clicking on 'No' . If 'Yes' is clicked, the Archive will be deleted even if on Legal Hold (see Note below).

Important note: Items within an Archive that are on Legal Hold cannot be moved.  Archives with an interest to an Accelerator database cannot be individually deleted. A Vault Interest and Legal Holds take precedence over the User deletion settings in the Site properties, Retention Category properties and the storage device settings.

The deletion of an Archive is an event that must only be undertaken after understanding the items in the Archive will not be available after deletion. The deletion of an Archive must also be in conformity with any and all compliance rules and  regulations that an organization may be subject to. Thus, the warning in the Archive Deletion prompt: "Once you click 'Yes'  you cannot cancel the deletion."
  

Note:

If there are any items listed in the 'Total items on hold' line, there are items on Legal Hold within this Archive from Cases within Discovery Accelerator (DA).  Also, if searches have been performed on this archive, the Accelerator product will mark the archive as an interest.  Please go through the following steps to determine which DA Cases have items on Legal Hold or an Interest for this Archive:

1. Copy the Archive Entry ID from the Event ID 7113 entry. It will have a format similar to this: 1C757ED88FC5C5D4EA36D8F6518774F3B1110000EVSITE01.

2. Replace AA with the Archive Entry ID and run the following SQL Query against the DA Customer Database(s). Be sure to retain the single quotes around the Archive Entry ID:

  

DECLARE @vid varchar(112) SET @vid = 'AA'

SELECT DISTINCT tc.[Name] FROM tblCase tc

JOIN tblIntDiscoveredItems tidi ON tidi.CaseID = tc.CaseID

JOIN tblVaults tv ON tv.VaultID = tidi.VaultID

WHERE tv.KVSVaultEntryID = @vid

UNION

SELECT DISTINCT tc.[Name] FROM tblCase tc

JOIN tblSearchItems tsi ON tsi.CaseID = tc.CaseID

JOIN tblVaults tv ON tv.VaultID = tsi.VaultID

WHERE tv.KVSVaultEntryID = @vid

 

3. Any Cases listed in the Query results will have to be reviewed by the appropriate personnel in order to maintain conformity with any and all compliance rules and regulations that an organization may be subject to prior to deleting the Archive.

 

 

Issue/Introduction

Deleting an Archive from the Enterprise Vault Administration Console (VAC) results in the Archive being Marked for Deletion but does not delete, even after restarting the Storage Service. Warning Event ID 7113 may be seen in the Enterprise Vault Event Log.