Arctera Enterprise Vault™ Insight Surveillance Administrator's Guide

Last Published:
Product(s): Enterprise Vault (15.2)
  1. Understanding Arctera Insight Surveillance
    1.  
      About Insight Surveillance web application
    2.  
      Routine operations executed with Arctera Insight Surveillance
    3.  
      About Arctera Insight Surveillance system security
    4.  
      Feature comparison: Arctera Insight Surveillance desktop application Vs Arctera Insight Surveillance web application
    5. Product documentation
      1.  
        White papers on the Arctera Support website
  2. Configuring Insight Surveillance: Desktop Client
    1.  
      Customizing the reviewing action statuses
    2. Importing configuration data from an XML file
      1.  
        About importing configuration data
      2.  
        Sample XML files
      3.  
        Format of the Dataload.xml file
      4.  
        Importing the configuration data
    3.  
      Specifying the Windows domains with which to synchronize employee details
    4.  
      Mapping employee properties to Active Directory or Domino directory attributes
    5. Grouping departments into partitions
      1.  
        Creating department partitions
      2.  
        Editing department partitions
      3.  
        Deleting department partitions
    6.  
      Setting up department attributes
    7.  
      Setting up custom message types
    8. Setting Insight Surveillance system configuration options
      1.  
        Ad Hoc Searches configuration options
      2.  
        Diagnostics configuration options
      3.  
        Document Conversion configuration options
      4.  
        Export/production configuration options
      5.  
        General configuration options
      6.  
        Home Page configuration options
      7.  
        Hotword Analysis configuration options
      8.  
        Item Prefetch Cache configuration options
      9.  
        Item Prefetch Cache (Advanced) configuration options
      10.  
        Policy Integration configuration options
      11.  
        Profile Synchronization configuration options
      12.  
        Random Capture configuration options
      13.  
        Reviewing configuration options
      14.  
        Search configuration options
      15.  
        Security configuration options
      16.  
        System configuration options
      17.  
        Vault Directory Synchronization configuration options
  3. Creating and viewing reports
    1.  
      About the Insight Surveillance reports
    2.  
      Accessing data through the Microsoft SQL Server Reporting Services (SSRS)
    3. Enhanced reporting
      1.  
        Configuring a reporting endpoint
      2.  
        Authentication
      3. Departments API
        1.  
          Departments - List
      4. Roles API
        1.  
          Roles - List
        2.  
          Roles - List by filters
      5. Users API
        1.  
          Users - List
      6. UserRoles API
        1.  
          UserRoles - List by filters
      7. ItemMetrics API
        1.  
          ItemMetrics - List
        2.  
          ItemMetrics - List by filter
      8. Evidence of Review by Department API
        1.  
          EvidenceOfReviewByDept - List by filter
      9. Evidence of Review by User API
        1.  
          EvidenceOfReviewByUser - List by filter
      10.  
        Supported OData query options
      11.  
        Supported reporting endpoint API filters and their values
      12.  
        Responses
    4. Accessing reports through the OData web service
      1.  
        Available Insight Surveillance datasets
      2.  
        Accessing the Insight Surveillance datasets
      3.  
        Using the OData service with Microsoft Excel
      4.  
        Using the OData service with Microsoft SQL Server Reporting Services (SSRS)
    5.  
      Configuring a Power BI template for reporting
  4. Appendix A. Troubleshooting
    1.  
      Insight Surveillance user interface user interface is not displayed properly in non-English environment
    2.  
      Issues with the random sampling of items
    3.  
      Display issues when you open a Insight Surveillance website in Internet Explorer 10 or later
    4.  
      Vault stores not displayed in the Insight Surveillance web client
    5.  
      TNEF-encoded attachments to Internet Mail (.eml) messages may not be readable after you export the messages from a review set
    6.  
      Synchronization errors after you rename the SQL Server computer
    7.  
      Performance counter errors when the eDiscovery Manager service starts
    8.  
      SQL Service Broker warning when restoring a customer database to a different server
    9.  
      Error messages when the Intelligent Review (IR) API authentication and authorization fails
    10.  
      Known issues after enabling FIPS

Error messages when the Intelligent Review (IR) API authentication and authorization fails

Error: Login failed for user NT AUTHORITY\ANONYMOUS LOGON

This is a Kerberos double hop error. This error appears if the Kerberos constrained trusted delegation is not set correctly between the Surveillance Server and the Surveillance Database Server.

To fix this error, perform the following steps:

  • Verify if the Surveillance Server is trusted for delegation.

  • Check if the installation setup/environment has Kerberos constrained trusted delegation is set properly. Verify the SQL Service Service Principal Names (SPNs) for correctness, duplication, and missing SPNs. Use the Kerberos Configuration Manager tool.

  • Verify if the Surveillance Server is using Fully Qualified Domain Name (FQDN) and not IP Addresses for connecting to the Surveillance Configuration and the customer databases. For configuration database, verify if the <install dir \Arctera Intelligent Review\IR.APIEndPoint \appsettings.json-> ConfigDBConnection key is using the FQDN and not IPAddress for connection string. For the customer database, verify if the configuration database->tblCustomer table for the 'Server' field for that customer is using FQDN and not IPAddress.

  • Verify if the SQL Server service account is a user, then that user is trusted for delegation, and various properties like the user is allowed for the delegation are set correctly.

Refer to the sample screen below.

SQL Always On Setup > Kerberos delegation issues

To fix this issue, perform the following procedure:

  1. Create the correct SPNs. For example, If the SQL Service is running as a Vault Service account (VSA) user, create or check if proper SPNs exist for VSA.
  2. Create SPNs for the availability group listener as well as the actual SQL nodes.
  3. Enable the Surveillance Server to trust for delegation (only the listener). Refer to the sample image below.

    Note:

    Choose Add… while trusting for delegation and choose the SQL Service account (VSA) on which the SPNs are configured.

  4. Restart the Active Directory Domain service on the Domain Controller.
  5. Restart Internet Information Services (IIS) on the Surveillance Server.
  6. Call the Intelligent Review (IR) API directly or via Enterprise Vault. Refer to the sample image below.