Digitally signed emails are dropped during indexing

book

Article ID: 100051575

calendar_today

Updated On:

Description

Error Message

The Processing Reconciliation Report shows that documents were dropped but does not provide a reason. 
The case indexer log will show the following, confirming that messages were dropped.
yyyy-mm-dd hh:mm:ss,ms INFO [esa.indexer.EmailBatchCommitter] (Email Batch Committer 2:[]) Time to save dropped msgs. No of dropped msgs: 3 Time taken: ss

Cause

By default, eDiscovery limits the maximum size of digitally signed emails to be processed to 10Mb.

Resolution

The size limit can be increased via a property setting.

  • To set the property, navigate to System > Support Features
  • Choose Property Browser from the drop-down
  • In the Select the Case (or system)* leave the default value of System
  • In the Name of property to change field, enter the property name: esa.crawler.pkcs7.MaxMsgBufSizeBytes
  • In the New Value (leave blank to remove) field, enter the value:  
    • Where is slightly greater than the size of the largest dropped email in the processed source.
    • For example, if the largest dropped email is 15Mb in size, set the value to 16000000.
  • Click the Submit button

Note: A services restart is required for this property change to take effect.

Issue/Introduction

After indexing digitally signed email, some of these emails may show as processed in the glyph under Sources & Pre-Processing, but are not available in Analysis & Review.

Additional Information

JIRA: CFT-3731