Have you ever watched your journal mailbox processing messages and ingesting them in to Enterprise Vault? On a busy system you'll see several different message classes and different Enterprise Vault icons. Have you ever wondered what they are?
Well it helps if you understand the different stages that each message goes through when it is being added to the journal archive by Enterprise Vault. So here goes:
- Mail arrives in the journal mailbox, message class will be IPM.Note -- a normal email (well, okay it will have a P1 and P2 message)
- When Enterprise Vault journal archiving task touches the message it will turn it into an IPM.Note.EnterpriseVault.PendingPart
- It will then turn it into an IPM.Note.EnterpriseVault.Pending item
- Finally it will delete it
You might see some items sitting as this 'new' PendingPart message class for a few minutes. This is governed by a feature in Enterprise Vault called the Journal Delay:
The idea of this is to wait a few minutes for other 'copies' of the journal message to arrive from other aspects of Exchange. If more do arrive, then they'll be consolidated into one single message in Enterprise Vault. Doing this prevents duplicates in the journal archive. The default value is 5 minutes, which should be good enough for most environments.
So take a few minutes today, at a time when you know your journal mailbox will be busy, and watch the items flow through. Make sure to add Message Class as a column in Outlook so you can see the different message classes as they're changed by Enterprise Vault. Also make sure Outlook is online mode, not cached.