After upgrade to version 7.1.2 , running a collection from Enterprise Vault fails before the search with an error: 440,852 Searcher exited with non-zero error code.
[#422300] EV searcher error - 440,852 Searcher exited with non-zero error code.
In version 7.1.1 and earlier, the Enterprise vault (EV) search criteria is written to a temporary location on the Clearwell appliance and deleted upon completion of the search.
In version 7.1.2 base and FIX1, the EV search criteria is written to the Destination by the account that starts the EsaEvCrawlerService on the Clearwell appliance. This required the account to have Write permissions on the Destination server.
In version 7.1.2 FIX2, the account that starts the EsaApplicationService writes the EV search criteria and the Source Account associated with the EV Source requires only Read permissions on the Destination server.
By design in version 7.1.2 and above, the EV search criteria is written with the collection task result for defensibility. The search criteria is used by the Collection Task in order to submit the request to the Enterprise Vault Indexing Engine. This will require the Source Account associated to the EV Source, a minimum Read permission on the Destination server.
If running version 7.1.2 base or FIX1, assign Read/Write permissions for the account that starts the EsaEvCrawlerService.
If running version 7.1.2 FIX2, assign the Account Source associated with the EV Source, Read permissions on the Destination server.