EvFsaArchivingTask.exe failed abnormally and will be restarted automatically
Article ID: 100055200
Updated On:
Description
Error Message
Restarting failed process.|The process has failed abnormally and will be restarted automatically.
Cause
While investigating the issue, a Dtrace was configured to capture the output information from the process EvFsaArchivingTask and the Event Viewer entries were analyzed.
Dtrace of EVFSAArchivingTask.exe shows the Event:
(EVTaskGuardian) <14900> EV~W |Event ID: 40967 1C649F99C0AE33941B6081213F28BE4AC1012f00evarchiv00 - Restarting failed process.|The process has failed abnormally and will be restarted automatically.
This event may occur multiple times once the execution of the FSA task is launched, either by the Schedule or as a Run Now for processing the Volumes assigned to the respective task.
The Enterprise Vault Event Viewer shows:
Log Name: Veritas Enterprise Vault
Source: Enterprise Vault
Event ID: 40967
Task Category: Task Guardian
Level: Warning
Description:
1C649F99C0AE33941B6081213F28BE4AC1012f00evarchiv00 - Restarting failed process.
The process has failed abnormally and will be restarted automatically.
The Application Event Viewer shows:
Log Name: Application
Source: Application Error
Event ID: 1000
Task Category: Application Crashing Events
Level: Error
Description:
Faulting application name: EvFsaArchivingTask.exe, version: 12.5.0.1221, time stamp: 0x5d9e153a
Faulting module name: ntdll.dll, version: 10.0.20348.1194, time stamp: 0x328f23a4
Exception code: 0xc0000374
Fault offset: 0x000e9bf9
Faulting process ID: 0x3a08
Faulting application start time: 0x01d932ffc7acf8bd
Faulting application path: E:\Program Files (x86)\Enterprise Vault\EvFsaArchivingTask.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Log Name: Application
Source: Application Error
Event ID: 1000
Task Category: Application Crashing Events
Level: Error
Description:
Faulting application name: EvFsaArchivingTask.exe, version: 12.5.0.1221, time stamp: 0x5d9e153a
Faulting module name: mso20win32client.dll, version: 16.0.5254.1001, time stamp: 0x61ac9ede
Exception code: 0xc0000005
Fault offset: 0x000a7190
Faulting process ID: 0x4890
Faulting application start time: 0x01d932ff4a723301
Faulting application path: E:\Program Files (x86)\Enterprise Vault\EvFsaArchivingTask.exe
Faulting module path: C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\mso20win32client.dll
Log Name: Application
Source: .NET Runtime
Event ID: 1026
Task Category: None
Level: Error
Description:
Application: EvFsaArchivingTask.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.AccessViolationException
at KVS.EnterpriseVault.FileSystemArchivingTask.FileSystemItemProcessor.MAPIInitialize(IntPtr)
at KVS.EnterpriseVault.FileSystemArchivingTask.FileSystemItemProcessor.InitializeMAPI()
at KVS.EnterpriseVault.FileSystemArchivingTask.FileSystemItemProcessor.Process()
at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
Resolution
A version of Outlook was confirmed as not being a supported version as per the Enterprise Vault Compatibility Matrix, and as this EV Server was used to process File Server targets only, the customer was advised to remove Outlook. Outlook is not needed for the archival of File Server content.
After removing Outlook, the issue did not re-occur.
Issue/Introduction
