Enterprise Vault partition rollover is something that many people setup, but with small lab environments it isn't something that is always that easy to test. So, the question I sometimes hear is:
"What events are logged for partition rollover"?
Well the answer is as follows:
Firstly if there are no ready partitions, Storage File Watch will log:
Log Name: Symantec Enterprise Vault
Source: Enterprise Vault
Date: 5/6/2013 13:46:17 PM
Event ID: 7027
Task Category: Storage File Watch
Level: Warning
Keywords: Classic
User: N/A
Computer: EV1A.EV.LOCAL
Description:
Partition rollover could not find any ready partitions for VaultStore Email of Storage service 1CFE6FC145153B74B8DEF36D35524084E1e10230evsite.
Note
All Partitions in of vaultStore Email will be closed. Use VAC to create a new open partition or open an existing partition.
The nicer one though is the one which is logged when rollover happens, it's the one you want to see!
Log Name: Symantec Enterprise Vault
Source: Enterprise Vault
Date: 11/06/2013 11:48:43
Event ID: 7028
Task Category: Storage File Watch
Level: Information
Keywords: Classic
User: N/A
Computer: ev1a.EV.Local
Description:
Partition rollover has occurred.
Details:
Storage Service ID:154E5EC232981384488AFE922985AC25C1e10000evserver
Vault Store: vs1
Closed Partition: vs1 Ptn1
Opened Partition: vs1 Ptn5
Triggering Mechanism: Forced
There is also the one below which shows you the current ready partitions:
Log Name: Symantec Enterprise Vault
Source: Enterprise Vault
Date: 11/06/2013 11:48:43
Event ID: 7029
Task Category: Storage File Watch
Level: Information
Keywords: Classic
User: N/A
Computer: ev1a.EV.Local
Description:
The ready partitions for VaultStore vs1 of Storage service 154E5EC232981384488AFE922985AC25C1e10000evserver are vs1 Ptn5,vs1 Ptn6,vs1 Ptn7,vs1 Ptn8,.