Compliance Accelerator Scheduled Searches with Sampling and Date Range 'Since Search Last Ran' could yield unexpected results following a failed run

Article: 100032727
Last Published: 2016-07-13
Ratings: 1 0
Product(s): Enterprise Vault

Problem

Compliance Accelerator allows scheduled searches to be configured with a date range of 'Since Search Last Ran'. This allows each scheduled search that is run to find new items that have been archived since the last run.

By default, this option searches from the date of the last run (or the start date for the first search) to the current day minus 1 (that is, up to yesterday). In addition to any other required search criteria, such scheduled searches can also be configured to show a sampling percentage of the items found.

If a scheduled search run fails, and the failed run is not rejected, and re-submitted after correcting the failure, it is possible the next scheduled run could yield unexpected results. The items count could be higher than expected with the items' date span starting from the earliest item in the target archive(s) until the current day minus 1. If the scheduled search has been configured with a sampling percentage that is less than 100%, it is possible items that were not previously sampled will now be sampled. Any subsequent search runs should yield the expected results, presuming there are no more run failures.

Cause

An issue was found in the parsing of the previous Searches' last run dates whereby if a NULL date was found, the Search reverted to using an open-ended start date for the Search.

Solution

This issue has been addressed in the following releases:

Enterprise Vault 12.0.4 Release
http://www.veritas.com/docs/000115861

Enterprise Vault 12.1.1 Release
http://www.veritas.com/docs/000116523

References

Etrack : 3892415

Was this content helpful?