Error Message

Log Name: Symantec Enterprise Vault
Source: Enterprise Vault 
Date: 8/25/2016 9:45:51 AM
Event ID: 3071
Task Category: Journal Task
Level: Error
Keywords: Classic
User: N/A
Computer: evserver1
Description:
The following message could not be archived by the Journaling Service as it may be corrupt. 

Title: FW: [this is a bad message] 
Mailbox: /O=testserver/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=EV JOURNALMBX

An error occurred whilst moving the message to the 'Enterprise Vault Journaling Service\Failed to copy' folder. The message has been marked as "Do Not Archive", and no further attempts will be made to archive this message. 


Log Name: Symantec Enterprise Vault
Source: Enterprise Vault 
Date: 8/25/2016 9:45:51 AM
Event ID: 3288
Task Category: Journal Task
Level: Warning
Keywords: Classic
User: N/A
Computer: evserver1
Description:
A problem has occurred while archiving a message. 
The archived item was not found or is no longer archive pending. 

Task: Exchange Journaling Task for DC01AP-P001EXC 
Title: FW: [this is a bad message] 
Mailbox: /O=testserver/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=EV JOURNALMBX
Internal reference: CArchivingAgent::MakeItemPendingAndProcessMsg [0x8004010F] 

This issue is caused by the JournalDelay registry key or Journal Policy being set to a value of 0.

Note: It is not recommended to set the JournalDelay value lower than 2.

1. Open registry editor on the Enterprise Vault server by running the regedit.exe command
2. Navigate to HKLM\SOFTWARE\Wow6432node\KVS\Enterprise Vault\Agents
3. Change JournalDelay to a minimum value of 2 minutes. Deleting the key will revert to the default of 5 minutes.
4. Move the e-mails back to the journal inbox
5. Restart the Journal task.

To set the policy, see screenshot below:



After changing the policy, Synchronize the journal mailbox for the policy to take effect.  

Note: This policy applies to all mailboxes assigned to this policy. It is possible to assign different policies to different mailboxes.  

Applies To:

All versions of Exchange 2007, Exchange 2010, Exchange 2013, Exchange 2016, and Exchange 2019

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.