Items with malformed attachments may remain stuck on the StorageQueue indefinitely.

Problem

In a SMTP Archiving environment, if Enterprise Vault (EV) is installed on Windows Server 2012 R2, some emails with malformed attachments can remain on the storage queue, getting retried indefinitely.

Furthermore, when archiving to a non-centera partition, a high memory usage by the dllhost processes may also be observed which may lead to the system running out of memory.

Error Message

Following lines may be seen in dtrace of  process StorageArchive OR StorageFileWatch.

EV:L           {CSMTPTraverserBase::ProcessMessage} Process the message's main bodypart...
EV:L           {CSMTPTraverserBase::ProcessBodypart} Processing body part. Content-type [multipart/mixed] BodyPart Type [bptMultipart] Attachment Id [1]Parent Attachment Id [0]
EV:L           {CSMTPTraverserBase::ProcessBodypart} Processing body part. Content-type [text/plain] BodyPart Type [bptText] Attachment Id [1] Parent Attachment Id [0]
EV:M         {CSMTPTraverserBase::ProcessBodypart:#1296} 'charset' attribute has been omitted.
EV:L           {CSMTPTraverserBase::PreserveContentHeaders} Attachment Id [1] Content-Type charset [iso-8859-1] Content Transfer Encoding [uuencode] Content-Disposition [attachment; filename="/u/...]
EV:L           {CSMTPTraverserBase::ProcessBodypart} Issuing 'OnAttachment' event. Attachment Id [1]
EV:L           {CSMTPTraverserBase::GetAttachContent:#796} Fetching current body part's [ft_RAW (6)] content...
EV:H          {CSMTPTraverserBase::GetBodyPartContent} Status: [An event was unable to invoke any of the subscribers  (0x80040201)]
EV:H          {CSMTPTraverserBase::GetAttachContent} (Exit) Status: [An event was unable to invoke any of the subscribers  (0x80040201)]
EV:H          {CMessageSplitter::OnAttachment} (Exit) Status: [An event was unable to invoke any of the subscribers  (0x80040201)]
EV:M         CCollectorEMCCentera::CollectStore() - CollectionClipStore returned status = 0x80040201 , StoreIdentifier = (null)

EV~E          Event ID: 6952 A EMC Centera Collector thread encountered an error and has stopped. |Reason: An event was unable to invoke any of the subscribers  (0x80040201)  |PartitionEntryID:
1DC2468D4C6E036469E61BC90816C47A81q10000EV.DOMAIN.COM|Method: CCollectorEMCCentera::CollectStore

V-437-6952

EV~E           Event ID: 6881 Unable to complete archive request ||Reason: An event was unable to invoke any of the subscribers (0x80040201) |Vault: SMTP Archive |Vault Id:        18E5578259D6EA6448DCA6F67BA61C2A41110000EV.DOMAIN.COM |Item: SA:-0 |Item Id: SA:20FC731BA8B420DD09E110B2F639F731 |Reference:         
CenteraStore::GenerateConvertedContent

V-437-6881

 

Solution

This issue has been addressed in the following release:

Enterprise Vault 11.0.1 Cumulative Hotfix 4 Release
http://www.veritas.com/docs/000097959

Enterprise Vault 12 release
http://www.veritas.com/docs/000099905
Note: For information on how to obtain Enterprise Vault 12 see: How to obtain the license key and installation download for Veritas products

Additionally when archiving to Non-Centera Partitions, the following registry key  needs to be created to process malformed attachments without single Instanced during archiving.

Location  HKEY_LOCAL_MACHINE \SOFTWARE \Wow6432Node \KVS \Enterprise Vault \Storage
REG_SZ   InsertQueuedItemNonRecoverableErrors
Value (HEX) 0x80040201

 

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

Etrack : 6881 Etrack : 3833968 JIRA : 6952