Enterprise Vault™ Discovery Accelerator Administrator's Guide
- Introducing Discovery Accelerator
- Introducing the Discovery Accelerator client
- Setting up and assigning roles
- Working with cases
- Setting up review marks and tags
- Using rules to mark and tag items automatically
- Using Custodian Manager
- About Custodian Manager
- Guidelines on using Custodian Manager
- Setting up custodians
- Setting up custodian groups
- Setting up custom custodian attributes
- Setting the primary custodian attribute
- Specifying the user account under which to synchronize custodians
- Synchronizing with entire Active Directory domains and Domino servers
- Setting the configuration options for Custodian Manager
- Searching for items
- About searching with Discovery Accelerator
- Creating and running Discovery Accelerator searches
- About the search criteria options
- Guidelines on conducting effective searches
- Pausing and resuming Discovery Accelerator searches
- About the Monitor Searches tab
- Selecting the archives in which to search
- Specifying the details of custom search attributes
- Restricting search results to correspond to Compliance Accelerator departments
- Defining email targets with Address Manager
- Building Discovery Accelerator search schedules
- Setting up custom message types
- Using Discovery Accelerator to search archived Skype for Business content
- Manually reviewing items
- About reviewing with Discovery Accelerator
- About the Review pane
- Filtering the items in the Review pane
- Searching within the review set
- Finding all items in the same conversation
- Assigning review marks and tags to items
- Adding comments to items
- Viewing the history of items
- Displaying printable versions of items
- Downloading the original versions of items
- Copying the item list to the Clipboard
- Deleting items from Enterprise Vault archives
- Changing how the Review pane looks
- Setting your Review pane preferences
- Working with research folders
- About research folders
- Creating research folders
- Editing the properties of research folders
- Copying items to research folders
- Reviewing the items in research folders
- Exporting items from research folders
- Giving other users access to your research folders
- Removing items from research folders
- Converting research folders into cases
- Deleting folders
- Exporting and producing items
- About exporting and producing items
- How exporting differs from producing
- Performing an export or production run
- About the limits on the number of simultaneous export and production runs
- Identifying the archives that contain duplicates of a specific item
- How to optimize export and production runs
- Making the export IDs or Bates numbers visible in Microsoft Outlook
- Creating and viewing reports
- Appendix A. Customizing Discovery Accelerator
- Specifying the Windows domains with which to synchronize employee details
- Setting Discovery Accelerator system configuration options
- Ad Hoc Searches configuration options
- Analytics Conversation Analysis configuration options
- Analytics Data Collection configuration options
- API configuration options
- Auditing configuration options
- Diagnostics configuration options
- Document Conversion configuration options
- Export/production configuration options
- General configuration options
- Home Page configuration options
- Item Prefetch Cache configuration options
- Item Prefetch Cache (Advanced) configuration options
- Legal Hold configuration options
- Policy Integration configuration options
- Privileged Delete configuration options
- Profile Synchronization configuration options
- Reviewing configuration options
- Search configuration options
- Security configuration options
- System configuration options
- Vault Directory Synchronization configuration options
- Customizing the columns in the Review pane
- Appendix B. Importing configuration data from an XML file
- Appendix C. Enterprise Vault properties for use in Discovery Accelerator searches
- About the Enterprise Vault search properties
- System properties
- Custom Enterprise Vault properties
- Custom Enterprise Vault properties for File System Archiving items
- Custom Enterprise Vault properties for SharePoint items
- Custom Enterprise Vault properties for Compliance Accelerator-processed items
- Custom properties for use by policy management software
- Custom properties for Enterprise Vault SMTP Archiving
- Appendix D. Troubleshooting
- A security warning may appear when you preview certain items in the Review pane of the Discovery Accelerator client
- Display issues when you run the Discovery Accelerator client in Windows 8 or later
- Display issues when you open a Discovery Accelerator website in Internet Explorer 10 or later
- Vault stores not displayed in the Discovery Accelerator client
- Discovery Accelerator searches return unexpected results
- Full-text search indexing is disabled by default in SQL Server
- Errors when exporting items from Discovery Accelerator
- TNEF-encoded attachments to Internet Mail (.eml) messages may not be readable after you export the messages from a review set
- Synchronization errors after you rename the SQL Server computer
- Performance counter errors when the Accelerator Manager service starts
- SQL Service Broker warning when restoring a customer database to a different server
- Issues with Custodian Manager
- Custodian Manager lets you synchronize multiple custodians with the same Active Directory account
- Custodian Manager does not list the members of a custodian group after you delete the group and then restore it by synchronizing with Active Directory
- If a custodian belongs to one Active Directory domain but is a member of a group in a second domain, Custodian Manager may not update the custodian's details when it synchronizes with the second domain
- Custodian Manager fails to synchronize with Domino LDAP users and groups whose names contain certain double-byte characters
- Issues with Discovery Accelerator reports
- Troubleshooting Privileged Delete failures
- Error messages when the Intelligent Review (IR) API authentication and authorization fails
Error messages when the Intelligent Review (IR) API authentication and authorization fails
This is a Kerberos double hop error. This error appears if the Kerberos constrained trusted delegation is not set correctly between the Compliance Accelerator Server and the Compliance Accelerator Database Server.
To fix this error, perform the following steps:
Verify if the Compliance Accelerator Server is trusted for delegation.
Check if the installation setup/environment has Kerberos constrained trusted delegation is set properly. Verify the SQL Service Service Principal Names (SPNs) for correctness, duplication, and missing SPNs. Use the Kerberos Configuration Manager tool.
Verify if the Compliance Accelerator Server is using Fully Qualified Domain Name (FQDN) and not IP Addresses for connecting to the Compliance Accelerator Configuration and the customer databases. For configuration database, verify if the <install dir \Veritas Intelligent Review\IR.APIEndPoint \appsettings.json-> ConfigDBConnection key is using the FQDN and not IPAddress for connection string. For the customer database, verify if the configuration database->tblCustomer table for the 'Server' field for that customer is using FQDN and not IPAddress.
Verify if the SQL Server service account is a user, then that user is trusted for delegation, and various properties like the user is allowed for the delegation are set correctly.
Refer to the sample screen below.
To fix this issue, perform the following procedure:
- Create the correct SPNs. For example, If the SQL Service is running as a Vault Service account (VSA) user, create or check if proper SPNs exist for VSA.
- Create SPNs for the availability group listener as well as the actual SQL nodes.
- Enable the Compliance Accelerator Server to trust for delegation (only the listener). Refer to the sample image below.
Note:
Choose Add… while trusting for delegation and choose the SQL Service account (VSA) on which the SPNs are configured.
- Restart the Active Directory Domain service on the Domain Controller.
- Restart Internet Information Services (IIS) on the Compliance Accelerator Server.
- Call the Intelligent Review (IR) API directly or via Enterprise Vault. Refer to the sample image below.