Error Message

Event Type: Warning
Event Source: Enterprise Vault
Event Category: Journal Task
Event ID: 3229
Description:
A Journal mailbox has a backlog of messages held in its Inbox.
Mailbox: JOURNAL
Messages Held: 155448
Warning Threshold: 150000
V-437-3229

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

1. Go to Start | Run on the EV server with the Journal ask, type regedit and click OK.
2. Expand HKEY_LOCAL_MACHINE\Software\Wow6432Node\KVS\Enterprise Vault\Agents.
3. Right-click the Agents key and choose New > DWORD Value.
4. Enter the name JournalWarningMsgCount (case sensitive).
5. Double-click JournalWarningMsgCount and enter a decimal value specifying the maximum number of messages allowed in the Journal Inbox before a warning message is logged. The default value is set to 150000.

 

 

By default, when Journal Mailbox's inbox folder exceeds 150000 message count, Enterprise Vault logs an Event 3229 on Enterprise Vault (EV) Server stating:
"A Journal mailbox has a backlog of messages held in its Inbox"
This value can be configured/altered with the help of registry settings. However, increasing backlog in Journal Mailbox might indicate a problem in Journal archiving.
Altering the journal mailbox backlog count value will only affect the warning event 3229. For example, when this value is to 200000, Event 3229 will only be logged after journal mailbox exceeds this threshold limit.
It will not reduce the number of messages held in Journal Mailbox, further investigation is required if backlog count is increasing.