Event ID 8392 and 2257 Flood Enterprise Vault Logs

book

Article ID: 100025377

calendar_today

Updated On:

Description

Error Message


Event Type: Error
Event Source: Enterprise Vault
Event Category: Retrieval Task
Event ID: 8392
User:  N/A
Computer: SERVER1
Description:
The EnterpriseVault.DirectoryVault object reported an error.
 
An attempt to retrieve an attribute value has failed. Attribute supplied Name.

V-437-8392


Event Type: Error
Event Source: Enterprise Vault
Event Category: Retrieval Task
Event ID: 2257
User:  N/A
Computer: SERVER1

Description:
The Retrieval Task '18C597B8F0716B843AC8D6AD40BB6ED721012000SGCASITE1' could not be started due to startup errors.

V-437-2257


Event Type: Error
Event Source: Enterprise Vault
Event Category: Retrieval Task
Event ID: 8392
User:  N/A
Computer: SERVER1

Description:
The EnterpriseVault.DirectoryVault object reported an error.
 
A call to the system function SafeArrayGetElement() failed with

The parameter is incorrect.
 
Internal reference: GAV

V-437-8392

A Dtrace of the RetrievalTask process will show the following: 

17608    16:21:16.488     [4940]    (RetrievalTask)    <13524>    EV:M    CVaultComputer::GetComputerIDByTaskID - Failed to find a matching computer entry [EVSERVER1]
17609    16:21:16.488     [4940]    (RetrievalTask)    <13524>    EV:H    {CVaultComputer::GetComputerIDByTaskID} HRXEX fn trace : Error [0x80004005], [.\VaultComputer.cpp, lines {171,184,194,198,203,208}, built Nov 19 15:44:09 2014].
17610    16:21:16.488     [4940]    (RetrievalTask)    <13524>    EV:H    {CAgentTask::Initialise} HRXEX fn trace : Error [0x80004005], [..\ArchiveService\AgentTask.cpp, lines {1293,1300,1307,1319,1323}, built Nov 19 15:44:02 2014].
17611    16:21:16.488     [4940]    (RetrievalTask)    <13524>    EV:H    {CAgentTask::Initialise:#1494} Error [0x80004005]
17612    16:21:16.488     [4940]    (RetrievalTask)    <13524>    EV:H    {CAgentTask::Initialise} (Exit) HRXEX fn trace : Unexpected fn exit path, returning error [0x80004005]

 

Cause

These errors occur when a Task has been deleted and there are items left to process in the associated MSMQ's.   
There are two scenario's for this: 

  • A Task is deleted and a new one created
  • A Task is deleted and a new one created on a different EV server

Resolution

To correct this issue, the old MSMQ's must be deleted.  

1. Open Computer Management
2. Expand Services and Applications > Message Queuing
3. Select Private Queues
4. In the Right Pane, find the Queues that are associated with the task that no longer exists
Note: If the task was re-created, there will be two sets of queues with the same name. The only difference is the 12 digit number at the end.  This 12 digit number is the date in which the queues were created.  In this scenario, delete the queues with the older date.  

5. The queues to be deleted are:
Admin Queue
R1
R2
A1
A2
A3
A4
A5
A6
A7

5. Restart the Task Controller service
6. Monitor the Event Logs to confirm the errors no longer occur


Additional Notes: Anytime a Task is to be deleted, the associated MSMQ's must be empty and then deleted. Ideally this should be done prior to creating a new task. 

 

Issue/Introduction

Event ID's 8392 and 2257 log every minute in the Enterprise Vault (EV) Event Logs

Additional Information

UMI: 437-2257