Woodrax
asked on
Exchange 2013 eDiscovery Failing, Error: One or more of the mailboxes in the search request couldn’t be found.
Good Morning, Experts!
I am having an issue with running eDiscovery within my Exchange 2013 environment.
When running a key word query, Exchange is failing to search any mailboxes, with the error:
One or more of the mailboxes in the search request couldn’t be found.
I attempted to run a query on specific mailboxes, and get the following error:
Errors:
A mailbox with items included in the search results couldn’t be found. This mailbox may have been moved, modified, or deleted. Please run this search request again later.
Mailbox: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recip ients/cn=< MAILBOXNAM E279
Mailbox: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recip ients/cn=M AILBOXNAME 7d6
Note that we have upgraded this server from Exchange 2010 to Exchange 2013. Also note that we have split the former single DB into three DBs, for backup and logging purposes.
I am part of the Discovery Management group. Prior to the Exchange 2010 upgrade, I was able to run eDiscovery without error.
Any assistance would be greatly appreciated!
I am having an issue with running eDiscovery within my Exchange 2013 environment.
When running a key word query, Exchange is failing to search any mailboxes, with the error:
One or more of the mailboxes in the search request couldn’t be found.
I attempted to run a query on specific mailboxes, and get the following error:
Errors:
A mailbox with items included in the search results couldn’t be found. This mailbox may have been moved, modified, or deleted. Please run this search request again later.
Mailbox: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recip
Mailbox: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recip
Note that we have upgraded this server from Exchange 2010 to Exchange 2013. Also note that we have split the former single DB into three DBs, for backup and logging purposes.
I am part of the Discovery Management group. Prior to the Exchange 2010 upgrade, I was able to run eDiscovery without error.
Any assistance would be greatly appreciated!
Another possible road block:
The maximum number of In-Place eDiscovery searches that can run at the same time in your organization is two.
If an eDiscovery search is started while two previous searches are still running, the third search won't be queued and will instead fail.
You have to wait until one of the running searches is completed before you can successfully start a new search.
The maximum number of In-Place eDiscovery searches that can run at the same time in your organization is two.
If an eDiscovery search is started while two previous searches are still running, the third search won't be queued and will instead fail.
You have to wait until one of the running searches is completed before you can successfully start a new search.
ASKER
Yes, and the targeted email search came up with a second error, which is also listed. We certainly have more than 100 users, but, either way, it still fails.
ASKER
There are no other eDiscovery searches running: The searches fail within a few seconds of starting, and I initiate new searches once it has shown that it fails.
ASKER
Honestly, it seems like the eDiscovery process is not recognizing the new environment, and is still trying to run queries on the old Exchange 2010 environment.
Ok, so much for low hanging fruit. Let's change tack based on your observation:
In-Place eDiscovery also uses a system mailbox with the display name SystemMailbox{e0dc1c29-89c 3-4034-b67 8-e6c29d82 3ed9} to hold In-Place eDiscovery metadata.
System mailboxes aren't visible in the EAC or in Exchange address lists.
In on-premises organizations, before removing a mailbox database where the In-Place eDiscovery system mailbox is located, you must move the mailbox to another mailbox database.
If the mailbox is removed or corrupted, your discovery managers are unable to perform eDiscovery searches until you re-create the mailbox.
In-Place eDiscovery also uses a system mailbox with the display name SystemMailbox{e0dc1c29-89c
System mailboxes aren't visible in the EAC or in Exchange address lists.
In on-premises organizations, before removing a mailbox database where the In-Place eDiscovery system mailbox is located, you must move the mailbox to another mailbox database.
If the mailbox is removed or corrupted, your discovery managers are unable to perform eDiscovery searches until you re-create the mailbox.
If the previous comment is a good working theory...than check out this article for the "how to" recreate the system mailbox it is still valid in 2013:
http://www.careexchange.in/how-to-recreate-system-mailbox-federatedemail-discoverysearchmailbox-in-exchange-2010/
http://www.careexchange.in/how-to-recreate-system-mailbox-federatedemail-discoverysearchmailbox-in-exchange-2010/
ASKER
Gotcha. So, basically, bad migration, where the eDiscovery mailbox was not migrated properly?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
100 is the maximum number of mailboxes that can be searched in a single In-Place eDiscovery search that still allows you to view keyword statistics. Did you query exceed this number?