Author and Subject missing in Enterprise Vault Search (EVS) for items archived via SMTP Journaling

book

Article ID: 100051166

calendar_today

Updated On:

Description

Error Message

The issue starts with EV complaining that the SMTP item will be archived as a file instead of a Journal item :

Log Name:      Veritas Enterprise Vault
Source:        Enterprise Vault
Date:          4/27/2021 2:50:05 PM
Event ID:      29072
Task Category: Storage Online
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      XXXXXX

Description:
The item failed to be archived as a message item, it will be archived as a file item instead.
Search functionality for the item will be reduced as message specific properties, including recipient information, will not be indexed. 
 
Reason: Unspecified error  (0x80004005)
Archive Id: XXXXXXXXXXXXX
Item Id: XXXXXXXXXXX

Name: XXXXXXXXX
Size: 0.06MB
Type: .eml

 

Following error is seen in Dtrace:

593        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveHeaders} (Entry)
594        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveHeaderValue} Preserving header field [urn:schemas:httpmail:subject]
597        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:from] address header.
598        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
599        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:sender] address header.
600        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
601        15:58:01.048         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:reply-to] address header.
603        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:to] address header.
605        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
606        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:bcc] address header.
614        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveAddressHeader} Examining [urn:schemas:httpmail:cc] address header.
615        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CSMTPAddressHelper::EmailAddrsIncludedInDisplayNames:#353} Email addresses contained display names [False]
616        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveHeaders} Number of fields updated [1]. Item [507025667444B3C87DA8F32D769ECCA1]
617        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::PreserveHeaders} (Exit) Status: [Exception]
618        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:L        {CMimeItem::GetMessageInStream} (Exit) Status: [Exception]
619        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:H        {CMimeItem::GetStream} exception
620        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:H        {CMimeItem::GetStream} (Exit) Status: [Unspecified error  (0x80004005)]
621        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:H        {MimeParserHelper::GetContent} Status: [Unspecified error  (0x80004005)]
622        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:M        {CSMTPFileSaveset::WriteJournalReportMessageToSaveset} encountered an error. HRESULT=[Unspecified error  (0x80004005)]
623        15:58:01.049         [27592]        (StorageOnlineOpns)        <13508>        EV:M        {CSMTPFileSaveset::LoadEnvelopeJournalMessage} encountered an error. HRESULT=[Unspecified error  (0x80004005)]
633        15:58:01.050         [27592]        (StorageOnlineOpns)        <13508>        EV~W        Event ID: 29072 The item failed to be archived as a message item, it will be archived as a file item instead. |Search functionality for the item will be reduced as message specific properties, including recipient information, will not be indexed.  | |Reason: Unspecified error  (0x80004005) |Archive Id: XXXXXXXXXX |Item Id: XXXXXXXXXXXX | |Name: XXXXXXXXXXX |Size: 0.01MB |Type: .eml |

Cause

When an SMTP Journal Report is archived as a 'File', the regular eml specific attributes like Author, Subject, etc. are not indexed by EV. This causes the EVS to display the item without the said fields.

It has been observed that EV throws the above error when the following option is selected in the OS Region Settings:

Control Panel -> Region -> Administrative -> Change system locale -> 'Beta: Use Unicode UTF-8 for worldwide language support'.

'

This setting has been recently introduced by MS.

 

Resolution

Uncheck the option 'Beta: Use Unicode UTF-8 for worldwide language support'.

This issue has been addressed in EV 14.1.2, EV 14.2 and higher available from Downloads

 

Issue/Introduction

Author and Subject is reported missing in Enterprise Vault Search (EVS) for items archived via SMTP Journaling. This issue is seen to extend to Compliance Accelerator (CA)/Discovery Accelerator(DA) searches as well.

Additional Information

JIRA: CFT-3769