Some items are not being archived from the journal mailbox by Enterprise Vault (EV) and Event IDs 3263, 3264, and 3280 appear in the application log after startup.

book

Article ID: 100016626

calendar_today

Updated On:

Resolution

When the journal service starts the following errors are reported in the application log:
Event ID 3263
An error occurred processing the external filter '%2'. No more filters will be processed. Error: %1 Mailbox: %3 Message Folder: %4 Message Title: %5
Event ID 3264
The following message could not be processed by an external filter and has been moved to Journaling Service\Failed External Filter.
Mailbox: /O=ACME/OU=ZKO/cn=Recipients/cn=ACME-JOURNAL
Title: Tournament
and Event ID 3280
Could not filter a message for Accelerator random message sampling.
Error: No such interface supported [0x80004002]
Internal References:
Call error 0x80004002
Filter.cpp (CFilter::GetRecipientAuthorInfo) [lines {174,177,179,185,188,197}] built Mar 23 19:23:43 2004 in the application log.
 
Upon finding these errors, it's advisable to look in the details for the event ID 3263 to find the offending message subject line and move or delete it from the journal mailbox.
This message is either corrupt or a message type that cannot be archived. Investigate why this message is experiencing an archive problem and, if necessary, create a mailbox rule to move it from the inbox to another folder.
 

Issue/Introduction

Some items are not being archived from the journal mailbox by Enterprise Vault (EV) and Event IDs 3263, 3264, and 3280 appear in the application log after startup.