Event ID: 3456 - Some mailboxes have a Warning status
Article ID: 100048790
Updated On:
Description
Error Message
The contents of these 3456 events is the same as the common 3448 informational events, but in addition to the summary of the archive run it contains a line stating that some mailboxes had Warnings.
Log Name: Veritas Enterprise Vault
Source: Enterprise Vault
Event ID: 3456
Task Category: Archive Task
Level: Warning
Computer: evarch1.ev.local
Description:
A Run Now run has ended.
Some mailboxes have a Warning status. Review the archive report and take appropriate action.
Exchange Server: EXCHSRV
Start time: 22/11/2019 05:49
Run mode: Archiving & Shortcut processing (0x3)
Run ID: RunNow_20191122_054953
Mailboxes targeted: 3
Task name: Exchange Mailbox Archiving Task for EXCHSRV
Items archived: 637 (18.82 MB)
Mailboxes completed: 0
Mailboxes partially processed: 0
Mailboxes with no action taken: 0
Mailboxes with warnings: 3
See Reports: https://evserver1.ev.local/EnterpriseVault/ExchangeArchivingReports.aspx?ExchSvr=EXCHSRV
V-437-3456
Cause
There were mailboxes that encountered a warning status during the archive run that requires the attention of the Enterprise Vault (EV) administrator. A full listing is provided below:
|
Status |
Warning |
Something about this mailbox requires the attention of the Enterprise Vault administrator. |
|
Sub-statuses |
Not provisioned |
This mailbox has not yet been provisioned in Enterprise Vault. No archiving is possible until it has been provisioned (see FAQ). |
|
Over send and receive limit |
The mailbox is over the Exchange send and receive quota limit. No archiving action is possible until either the limit is increased or some of the mailbox content is removed (see FAQ). |
|
|
Quota not achieved |
Archiving has successfully completed on this mailbox, but the combination of policy and mailbox contents mean that the Archiving process has not been able to achieve the Enterprise Vault target quota (see FAQ). |
|
|
Failed to process mailbox |
Some problem has prevented this mailbox from being processed. |
|
|
No Exchange quota set |
None of the three Exchange quota limits (send, receive, send+receive) has been set, so quota based archiving of this mailbox is not possible. |
|
|
Vault store in backup mode |
No messages can be saved to the Vault Store until it is no longer in backup mode. Archiving of this mailbox will be re-tried later. |
A full list of all status and sub-statuses are found in article 100040701.
Resolution
The EV administrator needs to investigate why certain mailboxes were not processed by referencing the ExchangeArchivingReport.aspx on the EV server. The event has the report hyperlinked in it which will direct the administrator to all reports.
https://
While the reports are available in CSV and HTML, it only provides access to the brief version of the archive run. To get a full report that includes much more data per mailbox, browse manually to the reports in the EV installation directory. See example below:
C:\Program Files (x86)\Enterprise Vault\Reports\Exchange Mailbox Archiving\
If the issue cannot be resolved by analyzing this report in conjunction with the event logs, create a case with Veritas Support to get assistance.
Issue/Introduction
