Problem

The Enterprise Vault Indexing service fails to start and logs error Event ID 41335 in the Symantec Enterprise Vault event log.

Error Message

[Symantec Enterprise Vault event log]

Event ID: 41335

Description: An error occurred while trying to start indexing engine.

[Dtrace]

A Dtrace of the EVIndexAdminService will show the following line:

EVIndexAdminService) <7092>  EV-H  {VELOCITYSTARTSTOPINDEXINGENGINE.EN_US} Some of the processes did not start, shutdown indexing engine.

Cause

One or more files of the Indexing Engine are corrupt.

Solution

This can be rectified by re-installing the indexing engine using the Indexing Redistributable supplied with the Enterprise Vault Install Media.

1.     Stop the Enterprise Vault Indexing Service on the affected Enterprise Vault Server.
 

2.     Stop the World Wide Web Publishing Service on the affected Enterprise Vault Server.
 

3.     Launch IIS Manager and delete the EVIndexing virtual Directory.
 

4.     Following the deletion of the Indexing virtual directory, delete the EVIndexingPool application pool.

NOTE: Do not delete any other virtual directories or application pools as doing so will damage the Enterprise Vault installation.
 

5.     Using windows explorer, navigate to the Enterprise Vault installation Directory and delete the EVIndexing subdirectory

NOTE: If Enterprise Vault is clustered the IndexMetaData folder (which is usually found under the EVIndexing subdirectory) may be held in a different location and will need to be deleted separately in addition to deletinig the EVIndexing folder in Step 5. To locate this folder run the below SQL query:

USE EnterpriseVaultDirectory
SELECT CE.ComputerName, ISE.MetaDataLocation
FROM ComputerEntry CE, IndexingServiceEntry ISE
WHERE CE.ComputerEntryID = ISE.ComputerEntryID

6.     Reinstall the Indexing Engine, using the “Symantec Enterprise Vault Indexing Redistributable.msi”. The redistributable file is located on the Enterprise Vault Installation Media, in the following location: "Server/EVTmp"

NOTE:
If any indexing hotfix has been applied to the affected Indexing Server, this must be uninstalled before re-installing the Indexing Redistributable. This is done by completing the following steps:

a. Locate the installation msi used to install the hotfix
b. Right-click on the msi and select uninstall
c. The hotfix will be removed and the Indexing Redistributable can now be run
d. Following the re-installation of the Indexing Server, please ensure to reapply any hotfixes that were previously removed.
 

7.     Restart the Enterprise Vault Indexing Service

NOTE:
It may take a while for the Indexing service to become fully operational following the reinstallation of the Indexing Engine, as a full Synchronization between Enterprise Vault and the Indexing Engine will be automatically triggered. The commencement and completion of this process will be marked by the following entries in the Enterprise Vault Event Log:

Event ID: 41372
Indexing Service has started the synchronization of index volume metadata between the indexing engine repository and the Directory database.

Event ID: 41377
Indexing Service has completed the synchronization of index volume metadata between the indexing engine repository and the Directory database.
Total index volume(s) whose metadata was created: x
Total index volume(s) whose location was updated: y

출처: <https://www.veritas.com/support/en_US/article.TECH212179>