The issue starts with EV complaining that the SMTP item will be archived as a file instead of a Journal item :
Log Name: Veritas Enterprise Vault
Source: Enterprise Vault
Date: 4/27/2021 2:50:05 PM
Event ID: 29072
Task Category: Storage Online
Level: Warning
Keywords: Classic
User: N/A
Computer: XXXXXX
Description:
The item failed to be archived as a message item, it will be archived as a file item instead.
Search functionality for the item will be reduced as message specific properties, including recipient information, will not be indexed.
Reason: Unspecified error (0x80004005)
Archive Id: XXXXXXXXXXXXX
Item Id: XXXXXXXXXXX
Name: XXXXXXXXX
Size: 0.06MB
Type: .eml
Following error is seen in Dtrace:
593 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveHeaders} (Entry)
594 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveHeaderValue} Preserving header field [urn:schemas:httpmail:subject]
597 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:from] address header.
598 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
599 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:sender] address header.
600 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
601 15:58:01.048 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:reply-to] address header.
603 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:to] address header.
605 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
606 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:bcc] address header.
614 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:cc] address header.
615 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
616 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveHeaders} Number of fields updated [1]. Item [507025667444B3C87DA8F32D769ECCA1]
617 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::PreserveHeaders} (Exit) Status: [Exception]
618 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:L {CMimeItem::GetMessageInStream} (Exit) Status: [Exception]
619 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:H {CMimeItem::GetStream} exception
620 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:H {CMimeItem::GetStream} (Exit) Status: [Unspecified error (0x80004005)]
621 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:H {MimeParserHelper::GetContent} Status: [Unspecified error (0x80004005)]
622 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:M {CSMTPFileSaveset::WriteJournalReportMessageToSaveset} encountered an error. HRESULT=[Unspecified error (0x80004005)]
623 15:58:01.049 [27592] (StorageOnlineOpns) <13508> EV:M {CSMTPFileSaveset::LoadEnvelopeJournalMessage} encountered an error. HRESULT=[Unspecified error (0x80004005)]
633 15:58:01.050 [27592] (StorageOnlineOpns) <13508> EV~W Event ID: 29072 The item failed to be archived as a message item, it will be archived as a file item instead. |Search functionality for the item will be reduced as message specific properties, including recipient information, will not be indexed. | |Reason: Unspecified error (0x80004005) |Archive Id: XXXXXXXXXX |Item Id: XXXXXXXXXXXX | |Name: XXXXXXXXXXX |Size: 0.01MB |Type: .eml |
When an SMTP Journal Report is archived as a 'File', the regular eml specific attributes like Author, Subject, etc. are not indexed by EV. This causes the EVS to display the item without the said fields.
It has been observed that EV throws the above error when the following option is selected in the OS Region Settings:
Control Panel -> Region -> Administrative -> Change system locale -> 'Beta: Use Unicode UTF-8 for worldwide language support'.
'
This setting has been recently introduced by MS.
Uncheck the option 'Beta: Use Unicode UTF-8 for worldwide language support'.
This issue has been addressed in EV 14.1.2, EV 14.2 and higher available from Downloads.