Enterprise Vault for Exchange: StorageOnlineOpns.exe crashes during mailbox archiving

Enterprise Vault for Exchange: StorageOnlineOpns.exe crashes during mailbox archiving

  • Article ID:100041805
  • Last Published:
  • Product(s):Enterprise Vault

Problem

Enterprise Vault for Exchange: StorageOnlineOpns.exe crashes with Event ID 1000 during the archiving of some corrupted messages; the Exchange Archiving task then logs the Event ID 3433 containing 'Could not build a saveset for the message titled...function [IStorageArchiveV80::Store()] failed' and 'Error: 0x800706BE Description: The remote procedure call failed'

Error Message

Enterprise Vault event log contains the following

Several occurences of the warning with Event ID 6654:

Log Name:      Veritas Enterprise Vault
Source:        Enterprise Vault
Event ID:      6654
Task Category: Storage Server
Level:         Warning
Description:
Storage Online Process EVInstance01 (1)  -  Restarting failed process
PID: 1744
Exit Code: <0xc0000409>

The process has failed abnormally and will be restarted automatically

Ultimately multiple occurences of the error with Event ID 6655:

Log Name:      Veritas Enterprise Vault
Source:        Enterprise Vault
Event ID:      6655
Task Category: Storage Server
Level:         Error
Keywords:      Classic
Description:
Storage Online Process EVInstance01 (1)  -  Process failed
PID: 1744
Exit Code: <0xc0000409>

The process has failed abnormally and will not be restarted. Either the process has exceeded  its restart count or automatic restart is disabled. The process can be restarted by stopping and restarting the Storage Service

Enterprise Vault Exchange archiving task fails with Event ID 3344:

Log Name:      Veritas Enterprise Vault
Source:        Enterprise Vault
Event ID:      3433
Task Category: Archive Task
Level:         Error
Keywords:      Classic
Description:
Could not build a saveset for the message titled [<email subject>] in Mailbox [/o=Veritas Lab/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=89ac5ae24ba74c38a59c1c89be133f43-Test User4], function [IStorageArchiveV80::Store()] failed.

Error: 0x800706BE
Description: The remote procedure call failed.

Application event log

Log Name:      Application
Source:        Application Error
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
Description:
Faulting application name: StorageOnlineOpns.exe , version: 12.1.0.1424, time stamp: 0x57ee2818
Faulting module name: MSVCR120.dll, version: 12.0.21005.1, time stamp: 0x524f7ce6
Exception code: 0xc0000409
Fault offset: 0x000a46a9
Faulting process id: 0x20e8
Faulting application start time: 0x01d3a1bd0d9ba8e4
Faulting application path: C:\Program Files (x86)\Enterprise Vault\StorageOnlineOpns.exe
Faulting module path: C:\Windows\SYSTEM32\MSVCR120.dll
Report Id: 4baa042a-0db0-11e8-80e7-0050560db730
Faulting package full name:
Faulting package-relative application ID:

 

Afterwards users are no longer able to access to any Enterprise Vault archived data until Enterprise Vault server is rebooted

Cause

The aforementioned issue occurs during the attempt to archive some corrupted items, in particular archiving some RSS items with the MAPI Property 'PidLidTaskStatus' having the value '-1620932754'

Workaround

In order to avoid other crashes it is advisable to remove from the user's mailbox the corrupted items (as for the email subject of the Event ID 3433)

Solution

This issue has been addressed in the following releases:

Enterprise Vault 12.2.3 Release
https://www.veritas.com/docs/100041232

Enterprise Vault 12.3
https://www.veritas.com/docs/100041266

References

JIRA : CFT-901
JIRA : CFT-925

Was this content helpful?