Event ID 45824 causing SMTP items to no longer be archived.

book

Article ID: 100043087

calendar_today

Updated On:

Description

Error Message

SMTP archiving stops and Exchange queue does not process and continues to queue.

Log Name:      Symantec Enterprise Vault
Source:        Enterprise Vault 
Event ID:      45824
Task Category: SMTP Service
Level:         Information
Computer:     EVSMTP.EV.LOCAL
Description:
The Enterprise Vault SMTP service received an email message that contains an unrecognized SMTP target address or invalid content.
Internal Details: BadData - chan:smtp-external host:exchange server ip:X.X.X.X helo:exchange server sender:<> reason:451 4.3.0 Unknown text initialisation failure 
 

V-437-45824

Cause

This issue occurs for one of the following two reasons

  1. This issue can occur if the SMTP holding folder threshold has been reached or if the SMTP Holding folder volume does not have enough free space available (for example an 8 TB volume with 10% default threshold would be around 818 GB's).
  2. Windows explorer reports the wrong information about the available space on the SMTP holding folder

Resolution

Change the threshold that is being monitored or move the SMTP holding folder.  

Change the monitoring threshold

Go to EV Site > Properties > Monitoring Tab.
Set the Space on SMTP holding folder volume - error setting to the required percentage and restart the Enterprise Vault Admin Service.  

Update monitoring settings

 

Move the SMTP holding folder

If the free disk space is low for the volume then it is recommended that the SMTP holding folder be moved to another location or more space be added to the current drive. To move the folder use the following process - 

  1. Stop the SMTP archiving task. 
  2. Go to the Holding Folder tab on the Properties of the SMTP archiving task. 
  3. Click on Help for guidelines on moving the folder to a new location. 

 

 

Issue/Introduction

How to update the monitoring configuration or move the SMTP holder folder when Event ID 45824 cause SMTP items to no longer be archived.