Error Message

No error message is present.

 

The first component of Random Sampling is Department Tagging. This is performed by the EV Storage service. The CA Departments and Monitored Employees' memberships are sent to EV Storage. Storage Tagging will add CA Department Tags to a message or item (message and item are used interchangeably here) based on the Monitored Employee SMTP address to Department information the Storage Service has at the time the message was processed. The Tagged messages' information is sent to CA where they wait for Random Sampling.

Guaranteed Sampling is the default Sampling method. Using this Sampling method, Storage Tagging does not determine which messages need to be Sampled. All messages that were Department Tagged are sent to CA for Sampling. CA runs Random Sampling once a day at 1 AM by default. At the Sampling time, the Random Sampling process starts by checking for any enabled Guaranteed Sample Searches. If Guaranteed Sample Searches are configured, they will be run with Random Sampling; if Guaranteed Sample Searches are not configured, Random Sampling will run by itself.

Guaranteed Sample Searches (GSS) work in combination with Random Sampling. Simply put, a Guaranteed Sample Search is a Search that runs during Random Sampling. Think of Guaranteed Sample Searches as a more focused Random Sample, by using key Search terms instead of just randomly selecting messages. Random Sampling will first run any Guaranteed Sample Searches and will add their results into Review. Then the Random Sampling process looks at the Guaranteed Sample Search results and asks a question: "Do the Guaranteed Sample Search results meet or exceed the Monitoring Policy Percentages per Monitored Employee in this Department?" If the answer is yes, then the Random Sampling process does not need to randomly add any more messages, as the Monitoring Policy Percentages have been fulfilled by the Guaranteed Sample Searches, and moves on to the next Monitored Employee and then Department. If the answer if no, then the Random Sampling process goes to work and randomly selects as many messages as needed to fulfill the Monitoring Policy Percentage per Monitored Employee in the Department, before moving on to the next Monitored Employee and then Department.

If there is an issue that causes the Guaranteed Sample Search to run for an extended period of time, it is possible that extended period of time could exceed a timeout which would then fail the Search. Because Guaranteed Sample Searches are an integral part of Random Sampling, a timeout failure causes the Guaranteed Sample Search results to be added into Review before marking the Search as Rejected so the Random Sampling processing can continue. These results are added without applying any Sampling percentage as may be defined in the Guaranteed Sample Search's Criteria. An example is if there are EV Indexing issues that prevent the Searches from completing within the timeout.

 

This behaviour is by design in all current versions of CA.

If the normal processing of allowing the user to review a Failed Search and either Accept or Reject was followed, any Guaranteed Sample Search failures would cause Random Sampling not to complete. Therefore, as Guaranteed Sample Searches are an integral part of Random Sampling, the Random Sampling/Guaranteed Sample Search processing will Accept all results from a failed Guaranteed Sample Search, without applying any Sampling percentage that may be specified in the Guaranteed Sample Search Criteria, and will add all results into Review.

This behaviour can have the unexpected side-effect of adding more than expected Random Sampling/Guaranteed Sample Search items into Review until such time that the cause of the Guaranteed Sample Search failures is resolved.

A workaround is to edit the timeout to a longer interval. Whilst this will not alleviate the issue, it could allow time to review the issue and possibly take corrective action to allow Random Sampling/Guaranteed Sample Searches to complete as expected. For example, if the Reviewers do not see any Random Sampling/Guaranteed Sample Search results to review in the morning, they could advise the onsite IT team who could then review EV Indexing for any potential issues and take any remediation steps, such as restarting the EV Indexing Services.

The timeout can be edited as follows:

1. Open the CA Client with a user having permissions to edit the CA Customer's Configuration Setting, such as the Vault Service Account (VSA).

2. Go to Configuration | Settings | Search.

3. Edit the Guaranteed Sample search timeout (mins) Setting from the default of 240 minutes or 4 hours to a value that would allow time for the users to review the Random Sampling/Guaranteed Sample Search results and determine if there were any issue.
For example, if the Random Sampling time was 1 AM (default time), the timeout could be set to 720 minutes or 12 hours. This would allow the users until 1 PM to review and advise if there were any issues and for the onsite IT team to review and take any possible remediation steps. Note the setting has a maximum value of 1440 minutes or 24 hours.

4. Save the change and acknowledge any prompts to restart Customer's Background Tasks, Remoting and/or Services.

5. Restart the Enterprise Vault Accelerator Manager service from the Services management console on the CA server.

There are currently no plans to address this issue by way of a patch or hotfix in the current or previous versions of the software at the present time. While this issue may be resolved in a future major revision of the software at a later time, it is not currently scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns.

 

Enterprise Vault (EV) Compliance Accelerator (CA) has the capability to perform Searches. There are 3 Search types available: - Immediate: Searches that run immediately when saved. - Scheduled: Searches that run on a configurable schedule. - Guaranteed Sample Searches (GSS): Searches that are run as part of Random Sampling to augment the Random Sampling results. When a Search runs and completes, it can be Accepted, which moves the Search results into Review, or Rejected, which discards its results. An option exists for Immediate or Scheduled Searches to Automatically accept search results. Selecting this option allows the Searches to automatically be Accepted and their results added into Review if the Searches complete successfully. This option is not present for GSS as the option is automatically selected in the background. When Immediate or Scheduled Searches complete in a failed status, they can be Rejected or Accepted. However, when Guaranteed Sample Searches complete in a failed status, they are automatically Accepted and their results added into Review without applying any Sampling percentages that may be defined in the Search Criteria. Additionally, these failed Guaranteed Sample Searches are seen with a Rejected status.

JIRA: CFT-4814