The Enterprise Vault Services shutdown unexpectedly and the admin service reports a 4183 error in the Microsoft Windows Event Log.
Article ID: 100018166
Updated On:
Description
Error Message
There have been more than 10000 errors in the last 7200 seconds, of which 90% or more are from the Enterprise Vault. The Enterprise Vault will now shut down.
Event ID: 4183
Description:The Enterprise Vault Services shutdown unexpectedly
V-437-4183
Resolution
In the event a customer needs to keep services running in order to resume archiving and/or restore during troubleshooting, a registry key and DWORD value will need to be enabled to prevent the services from being shutdown.
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
This resolution should only be used as a temporary fix until the "root cause" is determined and corrected. After the issue has been resolved, then the registry key should be removed so the Enterprise Vault can continue normal expected error report and handling.
The following Key and DWORD registry entries should be created.
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
This resolution should only be used as a temporary fix until the "root cause" is determined and corrected. After the issue has been resolved, then the registry key should be removed so the Enterprise Vault can continue normal expected error report and handling.
The following Key and DWORD registry entries should be created.
1. Login to the Enterprise Vault server under the security context of the Vault Service Account (VSA) and verify that the (EV) services have been stopped by the errors.
2. Click on "Start" | "Run" | then type "Regedit".
3. Click "OK".
4. Navigate to the following registry key:
- For 32 bit machines: "HKLM\Software\KVS\Enterprise Vault\AdminService".
- For 64 bit machines: "HKLM\Software\Wow6432Node\KVS\Enterprise Vault\AdminService".
5. Create a key called "EventLog".
6. Create a DWORD (32-bit) value called "Critical" under the "EventLog" key.
7. Apply a value of "0" (Zero) to the DWORD.
8. Start the (EV) services.
The registry key and registry value will disable the "10,000 error check" and prevent the services from stopping.
Note: Enterprise Vault Support does not recommend the use of this key as a workaround. This registry key is only meant to allow continued production activity until root cause of the errors being generated has been resolved.
Note: Enterprise Vault Support does not recommend the use of this key as a workaround. This registry key is only meant to allow continued production activity until root cause of the errors being generated has been resolved.
Issue/Introduction
The Enterprise Vault Services shutdown unexpectedly and the admin service reported a 4183 error event in the Microsoft Windows Event Log.
Enterprise Vault (EV) has built in functionality that will cause (EV) services to shutdown if a specific number of errors are generated by (EV) in a specific amount of time. If (EV) generates 10,000 errors within 7,200 seconds (2 hours), a request will be sent to the (OS) to shut down ((EV) services.
Checking the event viewer logs will help to determine the root cause of the errors. During this time, all archiving and restores will be halted due to the Enterprise vault services being shutdown.
Checking the event viewer logs will help to determine the root cause of the errors. During this time, all archiving and restores will be halted due to the Enterprise vault services being shutdown.
Additional Information
ETrack: 4183
UMI: V-437-4183
Was this article helpful?
Yes
No
Powered by
