Description

There might arise a need where a Veritas eDiscovery Platform (eDP) user is required to find the source location of a document listed in Analysis and Review search results.  These steps detail how to determine the source location of an MSG file that was processed as part of an Enterprise Vault (EV) Collection Set.

Steps to determine a source location:
 

1.  In Analysis and Review, run a search and choose the message file you're working with.  View it in Snippet View.
                ****The below images are from a Veritas lab.  The user names and email addresses are purely fictitious.***

2.  Locate and click on the envelope icon located to the right of Doc ID: in the message header.  This will display the Location, Sub-location, and Custodian of the message (see graphic below).

• Location:  This will contain the Collection Set name & type.
• Sub-location:  This will contain the collection task identifier.
• Custodian:   This will identify the custodian's name (if applicable).
   

3.  Select (triple-click) and copy the text from each category in the pop-up window to use for reference.

In the example graphic:

• Location:  Addison_White_2024-03-29:EXPRESS~VAULT~STORE;EDPEV
• Sub-location:  cn=d71db8efd1794d38830c28f40da9de1c-Addis
• Custodian:   Addison White - eDP Lab User 114

4.  Record this information for next steps.
5.  Next, within the same eDP case navigate to Processing > Sources & Pre-Processing.
6.  Use the search window to locate the Collection Set name in the source list.
7.  Expand and locate the collection task identifier in list of sub-source (highlighted yellow in graphic).
8.  Once located, under the Processing Status column, locate and click the blue idea icon next to the word 'Succeeded'.
9.  This will display the file path location, and PST file name of the PST containing the message file from Analysis and Review.  Copy this file path and use it for reference to navigate to the source.

Additional Information:

These steps may be helpful when working with problematic documents.  For example, if the message file displays the error message  [#10025] Message referred by a URN could not be retrieved.

The following eDP service accounts must have read and write access to the source location and PST.

• EsaApplicationService
• EsaPstCrawlerService
• EsaPstRetrieverService

1. Log into the eDP server as each service account.
2. Navigate the file path of the source location.  Are there any Windows prompts or error messages such as Access Denied or prompt for a password?
3. Create a test text file at that location, save it and then delete the file.  This will confirm read/write permissions to the preservation location of the source data.
4. Copy the PST file to the eDP server.   Can the PST be opened using Outlook on the eDP server?  Can the message located within the PST and opened?
5. Perform steps 1-4 for each of the three Esa service accounts as part of the troubleshooting process.