Digitally signed emails are dropped during indexing
book
Article ID: 100051575
calendar_today
Updated On:
Description
Error Message
The Processing Reconciliation Report shows that documents were dropped but does not provide a reason.
The case indexer log will show the following, confirming that messages were dropped.
yyyy-mm-dd hh:mm:ss,ms INFO [esa.indexer.EmailBatchCommitter] (Email Batch Committer 2:[]) Time to save dropped msgs. No of dropped msgs: 3 Time taken: ss
Cause
By default, eDiscovery limits the maximum size of digitally signed emails to be processed to 10Mb.
Resolution
The size limit can be increased via a property setting.
- To set the property, navigate to System > Support Features
- Choose Property Browser from the drop-down
- In the Select the Case (or system)* leave the default value of System
- In the Name of property to change field, enter the property name: esa.crawler.pkcs7.MaxMsgBufSizeBytes
- In the New Value (leave blank to remove) field, enter the value:
- Where is slightly greater than the size of the largest dropped email in the processed source.
- For example, if the largest dropped email is 15Mb in size, set the value to 16000000.
- Click the Submit button
Note: A services restart is required for this property change to take effect.
Issue/Introduction
After indexing digitally signed email, some of these emails may show as processed in the glyph under Sources & Pre-Processing, but are not available in Analysis & Review.
Additional Information
JIRA: CFT-3731
Was this article helpful?
thumb_up
Yes
thumb_down
No