Here is an article that I have not seen before :
When Enterprise Vault encounters a corrupt message during an archive run a 3288 event is logged and archiving stops
I’ve never actually implemented that, but then I don’t run production servers. Has anyone ever implemented that? Does anyone still then monitor the 3288 event’s and investigate the cause of them?