Exchange 2016 Search Index failing and ContentIndexState constantly reporting Unknown

Article
2019-02-04

Question

_{Monday, February 4, 2019 3:52 AM}

We have a single Exchange 2016 CU11 server.

Our Search Index is failing and the ContentIndexState is constantly reporting as "Unknown"

We have tried doing the fix for "Delete the Index GUID folder" and it does not help.

EventID errors are being reported

1010 - MSExchangeFastSearch

1012 - MSExchangeIS

Any assistance would be greatly appreciated

All replies (9)

_{Tuesday, February 5, 2019 4:19 AM ✅Answered | 2 votes}

Hi,

Please try below (method 2)

https://support.microsoft.com/en-us/help/2903482/event-id-1010-is-logged-when-no-results-are-returned-during-a-search-o

Thanks, Ashish (I can be wrong but can't be rude) “Tell me and I forget, teach me and I may remember, involve me and I learn.” MCITP, MCT, MCSE. Please remember to vote and mark the replies as answers if they help.

_{Monday, February 4, 2019 5:52 AM}

Hi,

Can you please share complete event id details?

_{Tuesday, February 5, 2019 4:05 AM}

Hi Ashish
Thanks and see below

Event ID - 1010
Source - MSExchangeFastSearch

An operation attempted against a FAST endpoint exprienced an exception. This operation may be retried. Error details: Microsoft.Exchange.Search.Fast.PerformingFastOperationException: An Exception was received during a FAST operation. > System.ServiceModel.FaultException: error CS1548: Cryptographic failure while signing assembly 'c:\Windows\Temp\fgpvx2l0.u5x\Microsoft.Exchange.TopNCompilation.2.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.Ceres.ContentEngine.Admin.FlowService.IFlowServiceManagementAgent.PutFlow(String name, String serializedFlow)
at Microsoft.Exchange.Search.Fast.FastManagementClient.AgentHandle`1.<>c__DisplayClass6_0.<PerformOperation>b__0(TManagementAgent agent)
at Microsoft.Exchange.Search.Fast.FastManagementClient.PerformFastOperation[TManagementAgent,TResult](AgentHandle`1 agentHandle, Func`2 function, String eventLogKey)
End of inner exception stack trace

Event ID - 1012
Source - MSExchangeIS

Exchange Server Information Store has encountered an error while executing a full-text index query ("andnot(string("beasley*", mode="and"), folderid:string("D9C16FF75634EC428F1FB792365E838C00000000A4E70000"), folderid:string("D9C16FF75634EC428F1FB792365E838C00000000A4E20000"), folderid:string("D9C16FF75634EC428F1FB792365E838C00000000A4EC0000"), folderid:string("D9C16FF75634EC428F1FB792365E838C00000000A4F10000"))"). Error information: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Internal error while processing request (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
Microsoft.Ceres.InteractionEngine.Component.ProcessingEngineException: Internal error while processing request
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.LogAndRethrowException(Exception e)
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.ExecuteSearchFlow(String flowName, IEnumerable`1 inputData)
at SyncInvokeExecuteSearchFlow(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)).

_{Tuesday, February 5, 2019 1:30 PM}

Hi,

Besides, you can try to delete the index file for the database.

1. Stop Microsoft Exchange Search and Microsoft Exchange Search Host Controller services.

2. Find the content index file. Use Get-MailboxDatabase <database name> | fl EDBFilePath cmdlet to locate the database file. The content index is stored in the folder named for the GUID of the database.

3. Delete the folder.

4. Restart Microsoft Exchange Search and Microsoft Exchange Search Host Controller services.

For your referenc:

Exchange 2013, Event 1012, MSExchangeIS

Regards,

Dawn Zhou

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

_{Tuesday, February 5, 2019 9:13 PM}

Hi Dawn
As stated in my first comment, we have tried this "Delete the Index GUID Folder" solution multiple times and it still fails.

Hi Ashish
I have followed your instructions and will let it run and let you known tomorrow.
So far we have only seen the Event ID 1010 with Source MSExchangeFastSearch, as per below

An operation attempted against a FAST endpoint exprienced an exception. This operation may be retried. Error details: Microsoft.Exchange.Search.Fast.PerformingFastOperationException: An Exception was received during a FAST operation. > System.ServiceModel.FaultException: error CS1548: Cryptographic failure while signing assembly 'c:\Windows\Temp\1b0ki1it.iba\Microsoft.Exchange.TopNCompilation.2.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

_{Tuesday, February 5, 2019 9:28 PM}

Hi,

Can you please go to below folder and provide what permissions are there:-

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

_{Tuesday, February 5, 2019 9:52 PM}

Hi Ashish
This is Exchange 2016 on Windows 2016
As such, I assume you mean C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

"Network Service" has Read/Execute permission
Over half a million files in this directory?

_{Tuesday, February 5, 2019 9:55 PM}

Hi,

Add full control for Exchange Servers, Exchange Trusted Subsystem and administrators on MachineKeys folder.

After that reboot the server.

For reference:-

https://social.technet.microsoft.com/Forums/en-US/cb194ffc-3afb-4f5a-b40e-eba7a72f1e36/content-index-state-unknown-for-all-databases-on-upgraded-cu11-server?forum=Exch4016SD

_{Wednesday, February 6, 2019 8:45 PM}

That seems to have fixed the problem. The ContentIndexState is now healthy on all databases.

Have just rebooted the server this morning, but there was no 1010 or 1012 errors overnight.

Thanks for the assist Ashish

Share via

Exchange 2016 Search Index failing and ContentIndexState constantly reporting Unknown

Question

All replies (9)

Additional resources