Enterprise Vault for Exchange: Event ID 3378 is generated during a scheduled archive run or after manually initiating an archive run
Article ID: 100020926
Updated On:
Description
Error Message
Event Type: Warning
Event Source: Enterprise Vault
Event Category: Archive Task
Event ID: 3378
Computer: EVSERVER
Description: The following item has been moved in the mailbox but it could not be updated in the archive.
Mailbox: /o=Group/ou=OrganizationaUnit/cn=Recipients/cn=NameOfMailbox
Folder: \Folder1\Subfolder
Title: <_Title of the item_>
Archive folder updated: TRUE
Retention Category updated: FALSE
Reason: Item's Retention Category cannot be updated. The original Retention Category is on hold but new Retention Category is not. [0xc0041b78]
V-437-3378
See Dtrace excerpt of process ArchiveTask below:
{CArchivingAgent::UpdateMetadataOfMovedItems:#27713} metadata update request completed successfully now check the results
{CArchivingAgent::UpdateMetadataOfMovedItems:#27722} there are [3] items whose metadata did not update successfully
{CArchivingAgent::UpdateMetadataOfMovedItems:#27730} item [201408137951835~201408131743460000~Z~B127C3D56644D315667806CDE34D51B1] failed with error (0xC0041B78). folder not updated - [FALSE], ret cat not updated - [TRUE]
Note: The above Dtrace excerpt was collected from an Enterprise Vault 10.0.3 server.
Cause
Shortcut is moved from folder A to folder B, the retention category for folder A is configured to "Prevent deletion of archived items in this category." The retention category for folder B is not configured to "Prevent deletion of archived items in this category."
Resolution
Use HideMovedItemUpdateFailure to suppress the logging of these events. Set HideMovedItemUpdateFailure to 1 to suppress logging of event ID 3378. If HideMovedItemUpdateFailure is not present, or is set to its default value of 0, these events are logged. See below:
|
Location |
HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node \KVS \Enterprise Vault \Agents |
|
Content |
DWORD 0 - (Default) Do not suppress event ID 3378. 1 - Suppress event ID 3378. |
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
Issue/Introduction
