Event ID 29073 occurs and archives remain Marked for deletion when storage is ECS

book

Article ID: 100059083

calendar_today

Updated On:

Description

Error Message

Source: Enterprise Vault
Event ID: 29073
Task Category: Storage Delete
Level: Warning
Computer: evserver.ev.local
Description:
The following archive has not been deleted because the remaining items are either on hold or locked by a compliance device retention period.
Archive Name = Test Archive
Archive Entry Id = 1ABCDE3AD3DA06841BC41AD534BFFD6F41110000evserver.ev.local
Total items on hold = 199263

V-437-29073

A Dtrace of the StorageDelete process will show the following when attempting to delete an item: 

(StorageDelete)    <7124>    EV:M    {CVaultStoreDB::GetSavesetProperties:#5856} Item Identifier: [F0DD7F8420108B17DFD62FFE269B1999]
(StorageDelete)    <7124>    EV:M    {CVault::GetItemProperties}  Seq No:156347 Partition ID:0 Store Id:9c86753a-5ed0-4b06-9499-37b597b999ff CollectionId:False
(StorageDelete)    <7124>    EV:M    Dell EMC ECS Streamer: CStreamerObject::Info StoreIdentifier = '9c86753a-5ed0-4b06-9499-37b597b999ff'
(StorageDelete)    <7124>    EV:M    Dell EMC ECS Streamer: CStreamerObject::Info StoreIdentifier = '9c86753a-5ed0-4b06-9499-37b597b999ff', RetentionDate (UTC) = '2029-01-02 12:15:24'
(StorageDelete)    <7124>    EV:M    {CVault::LogTraceDeletionRefusal:#2140} Deletion of item [F0DD7F8420108B17DFD62FFE269B1999], Saveset [201802286020383~201801541213250000~Z~F0DD7F8420108B17DFD62FFE269B1999] with [0] holds has been refused: [DELETE_ITEM_COMPLIANCE (0x8)].
(StorageDelete)    <7124>    EV:L    CDeleteVault::DeleteSavesets Information: Saveset [entryId = F0DD7F8420108B17DFD62FFE269B1999] can't be deleted as it is on hold.

 

Cause

The issue is caused when a partition is set to WORM mode and retention is written to the item on storage.  The item cannot be deleted until the RetentionDate has passed.  

 

Resolution

The archived items will be deleted once the retention period has expired. The archive status can be changed to normal using the process in the Related articles section. 

 

Issue/Introduction

An archive cannot be deleted and remains in a Marked for deletion status when located in Dell Elastic Cloud Storage (ECS).