Event ID 6882 when retrieving items from secondary storage with vault cache.

book

Article ID: 100049264

calendar_today

Updated On:

Description

Error Message

The following may appear in the event logs:

Event ID: 6882
Source: Migrator Server
Reason:           The system cannot find the file specified.  (0x80070002)
Vault:              Sent Items
Vault Id:           XXXX
Item Id:            XXXX
Reference:          Vault/RI
Extended Item Info: 
Supplementary Info:

[time stamp]    ID: 6838
Failed to recall a Saveset from its Collection.    
Reason: The system cannot find the file specified.  (0x80070002)  
Relative Saveset Filename: XXXX.DVSSP  
Relative Collection Filename: XXX\Collection1405843.CAB  
PartitionEntryID: XXX  
PartitionGUID: XXX  
Partition Root Path: XXX  
Secondary Location:   
Migrated File Id:    
Reference: NSDR/LCF    

Note: The issue can occur when exporting to PST

Cause

When downloading items to vault cache from secondary storage the associated cab file must be copied from secondary storage to primary storage. If an item has multiple parts\attachments in different cab files then each associated cab file must be copied from secondary storage to primary storage. If the cab file settings are large (i.e. Larger than 10 MB) and there are multiple cab files to download then all cab files may not download in the expected time for the migratorserver process to find them. As a result the event id 6882 with the Reason:  "The system cannot find the file specified.  (0x80070002)" will be generated. 

As the issue is a result of all the cab files not being on primary storage in the expected amount of time there are numerous considerations that can contribute to the delay. 

  • Network latency between secondary storage and the EV server.
  • Latency between the EV server and primary storage
  • Anti-virus scanning of the primary storage location
  • Secondary storage being cloud based
  • Traversing a WAN between EV, primary, and secondary storage
  • Size of the cab files being retrieved 

Note: The cab files actually do get recalled from secondary storage to primary storage. They just don't get there in the time expected. Attempting the export or synchronization a second time may not reproduce the errors again. This is because in the second attempt the cab file can now be found on primary storage. 

Resolution

Important to Note: Secondary storage is not ideal for frequently accessed data as it can be slow to respond depending on the frequency of access, amount of data being accessed and the environment. 

As this issue can be environmental there is no one solution that can resolve every occurrence in every environment. However, the following recommendations have been known to eliminate and or alleviate the frequency of occurrences of the issue.

  • Excluding the primary storage location from real time anti-virus scanning
  • Limiting the size of cab files to 10 MB in the 'Collections' tab of the partition properties
  • Disable the following NIC settings per the following TN: https://www.veritas.com/support/en_US/article.100023865
  • TCP Chimney Offload
  • TCP/IP Offload Engine (TOE)
  • TCP Segmentation Offload (TSO)
  • Increasing the Maximum size of users Vault Cache in the 'Vault Cache' tab of the Exchange Desktop policy

Issue/Introduction

When using vault cache to download items from secondary storage event ID 6882 may show up in the event logs.

Error Message