Event ID 41542 is logged during Enterprise Vault SMTP archiving

book

Article ID: 100044233

calendar_today

Updated On:

Description

Error Message

This warning is typically logged when the EV SMTP Task on EVServer01 is archiving data on an EV SMTP Archive on EVServer02.

The following events are logged: 

EVServer01

Event    : 41542
Source   : Enterprise Vault 
Category : SMTP Archiving Task
Computer : EVServer01.domain.local
Description:
Unable to archive the file ..\29\13\22\1510961769.53140.1025905.eml. Reason: The Enterprise Vault Directory or Storage service is not running. Error Code 0x80040300
SMTP Archiving task will attempt to archive this file later.
Task: SMTP Archiving Task 01


EVServer02 (System Event)

Event    : 10028
Source   : DCOM
Category : None
User     : \S-1-5-21-2688715770-2019455776-278592348-1604
Computer : EVServer02.domain.local
Description:
DCOM was unable to communicate with the computer EVServer01.domain.local using any of the configured protocols; requested by PID e31c (C:\Program Files (x86)\Enterprise Vault\EvSMTPTask.exe).

 

Cause

This issue happens if the remote server (EVServer02 in the above example) cannot communicate using the DCOM protocol; refer to this Microsoft Article for further DCOM troubleshooting.

Resolution

The warning with Event ID 41542 can be safely ignored if no other related errors are logged afterwards.

The Enterprise Vault SMTP task automatically re-tries to archive the same item.  If the task is completed successfully in the next cycle, the corresponding .eml file (as from the log ..\29\13\22\1510961769.53140.1025905.eml) is removed from the SMTP Holding folder.

Issue/Introduction

In a scenario with multiple Enterprise Vault (EV) servers running SMTP archiving, the Event ID 41542 containing 'The Enterprise Vault Directory or Storage service is not running. Error Code 0x80040300' is logged.

Additional Information

JIRA: CFT-1364