Message

The backup operation has started.

Fields

Message

The backup catalog is corrupted. Please recover the catalog from a backup using the Windows Server Backup snap-in or the WBADMIN RESTORE CATALOG command.

Message

The backup catalog on the selected disk '%1' is corrupted so that you will not be able to perform a recovery operation from this location. Please choose a different backup storage location.

Fields

Message

The backup operation has finished successfully.

Fields

Message

The backup operation that started at '%6' has failed with following error code '%2'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation has failed because another backup or recovery operation is in progress. Please stop the conflicting operation, and then rerun the backup operation.

Message

The backup operation that started at '%6' has completed with errors. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation was canceled.

Fields

Message

The backup operation that started at '%1' has failed because the Volume Shadow Copy Service operation to create a shadow copy of the volumes being backed up failed with following error code '%2'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

There is no backup available on the storage location. Please confirm that the storage location is not corrupted, and then create a new backup that you can use to perform a recovery from the storage location.

Message

The backup of volume '%2' on the backup storage location is corrupted. Run CHKDSK /R to determine if the storage location itself is corrupted. If needed, replace the disk or change the storage location, and then create a new backup that can be used to perform a recovery.

Fields

Message

The backup has some corrupted application metadata and cannot be used to perform a recovery. Run CHKDSK /R to determine if the storage location itself is corrupted. If needed, replace the disk or change the storage location, and then create a new backup that can be used to perform a recovery.

Fields

Message

The backup operation has completed with warning(s) - Volume '%2' has developed new bad clusters. This may be an indication of problems with your hardware. %3 bytes have not been backed up because they could not be read. Please run the CHKDSK /R command on '%2' and then rerun the backup operation.

Fields

Message

The backup operation has completed.

Fields

Message

The scheduled backup configuration conflicts with current Group Policy settings, error - '%1'. The scheduled backup operation has failed due to the conflict. Please update the settings for Group Policy or the scheduled backup.

Fields

Message

The backup operation has failed because recovery planning is in progress through some other client. If multiple instances of recoveries are running on the local computer or on a computer connected to the local computer, close these multiple instances and then rerun the backup operation.

Message

The backup operation that started at '%1' has failed because the Windows Server Backup engine could not be contacted, error code '%2'. Please confirm that the service is installed and enabled, and then rerun the backup operation.

Fields

Message

The scheduled backup operation that started at '%1' has failed because the schedule settings were not found. Please reconfigure the scheduled backup.

Fields

Message

The backup operation attempted at '%4' has failed to start, error code '%5'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation that started at '%2' has failed because another backup or recovery operation is in progress. Please stop the conflicting operation, and then rerun the backup operation.

Fields

Message

The scheduled backup configuration conflicts with current Group Policy settings, error - '%1'. The scheduled backup operation started at '%2' has failed due to the conflict. Please update the settings for Group Policy or the scheduled backup.

Fields

Message

The backup operation that started at '%2' has failed because recovery planning is in progress through some other client. If multiple instances of the Recovery Wizard are running on the local computer or on a computer connected to the local computer, close these multiple instances and then rerun the backup operation.

Fields

Message

The backup operation that started at '%6' has encountered errors.

Fields

Message

Backup started a fresh backup for volume '%1' ('%2') : [Reason: '%3']. This may cause loss of older backup versions when backup completes.

Fields

Message

Backup failed for volume '%1' ('%2'): [Reason: '%3'].  Please delete the target file '%4' and retry backup.

Fields

Message

The backup operation has failed because no backup storage location could be found. Please confirm that the backup storage location is attached and online, and then rerun the backup operation.

Message

The backup operation has failed because the required space was not available on the backup storage location. Free up space on the storage location or change the storage location to one with enough space to run the backup.

Fields

Message

The backup storage location is running low on free space. Future backup operations that store backups on this location may fail because of not enough space.

Fields

Message

The backup operation has failed because the remote shared folder that you are using for a backup storage location is not writeable. Please check permissions for this location, and then rerun the backup operation.

Fields

Message

Windows Server Backup is waiting for a DVD to be inserted into the drive.

Message

A scheduled backup has been configured for this computer.

Message

The scheduled backup for this computer has been modified.

Message

The scheduled backup was canceled. To create a new backup, you must reconfigure scheduled backups or run a one-time backup operation.

Message

A scheduled backup has been configured for this computer.

Fields

Message

The scheduled backup was canceled. To create a new backup, you must reconfigure scheduled backups or run a one-time backup operation.

Message

A new volume '%1' was detected that is not in the list of volumes to include in the backup. Please add it to the scheduled backup configuration if you want to protect this volume.

Fields

Message

A volume '%1' in the list of volumes to include in the backup is missing. This could be because the volume is dismounted, reformatted, or the disk is detached. Please correct the issue or remove the volume from the list to back up, and then rerun the backup operation.

Fields

Message

The system catalog has been recovered from the backup storage location '%1'.

Fields

Message

The system catalog has been deleted.

Message

The recovery operation has started.

Fields

Message

The operation to recover volume(s) has completed.

Fields

Message

The operation to recover volume(s) that started at '%9' has successfully completed.

Fields

Message

The volume recovery operation has completed with errors.

Fields

Message

The volume recovery operation has failed with errors.

Fields

Message

The operation to recover volume(s) that started at '%9' was canceled.

Fields

Message

The operation to recover volume '%1' has failed or was canceled. The volume may now be corrupted and may need to be reformatted. Run CHKDSK /R on the volume to look for corrupted sectors.

Fields

Message

The operation to recover '%1' has failed because the volume that you are recovering to is too small. Please try recovering to a larger volume.

Fields

Message

The operation to recover file(s) has completed.

Fields

Message

The recovery operation of file(s) that started at '%9' completed successfully.

Fields

Message

The file recovery operation completed with errors. One or more files may not have been recovered correctly.

Fields

Message

The file recovery operation failed with errors.

Fields

Message

The recovery operation of file(s) that started at '%9' was canceled.

Fields

Message

The backup set of volume '%2' on the backup storage location has been loaded.

Fields

Message

The operation to recover file(s) started at '%10' has completed successfully. Log of files successfully recovered '%11'.

Fields

Message

The file recovery operation has completed with errors. One or more files may not have been recovered correctly. Log of files successfully recovered '%11'. Log of files not successfully recovered '%12'.

Fields

Message

The file recovery operation has failed with errors. Log of files not successfully recovered '%12'.

Fields

Message

The operation to recover file(s) that started at '%10' was canceled.

Fields

Message

The operation to recover component(s) has completed.

Fields

Message

The operation to recover component(s) that started at '%10' has completed successfully.

Fields

Message

The operation to recover component(s) has completed with errors. One or more components may not have been recovered correctly.

Fields

Message

The operation to recover component(s) has failed with errors.

Fields

Message

The operation to recover component(s) that started at '%10' was canceled.

Fields

Message

The system state recovery operation started at '%1'.

Fields

Message

The system state recovery operation has completed.

Fields

Message

The system state recovery operation that started at '%1' has completed successfully. Log of the files successfully recovered: '%22'.

Fields

Message

The system state recovery operation that started at '%1' has failed with errors. Log of files successfully recovered '%22'. Log of files not successfully recovered '%23'.

Fields

Message

The system state recovery operation that started at '%1' has failed with errors. Log of files successfully recovered '%22'. Log of files not successfully recovered '%23'.

Fields

Message

The system state recovery operation that started at '%1' was canceled.

Fields

Message

The backup catalog is corrupted. Please recover the catalog from a backup using the Windows Server Backup snap-in or the 'WBADMIN RESTORE CATALOG' command.

Message

The backup operation that started at '%1' has failed with following error code '%2' (%3). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation that started at '%1' has failed because another backup or recovery operation is in progress. Please stop the conflicting operation, and then rerun the backup operation.

Fields

Message

The backup operation that started at '%1' has failed to back up volume(s) '%2'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation that started at '%1' has failed because the Volume Shadow Copy Service operation to create a shadow copy of the volumes being backed up failed with following error code '%2'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

There is no backup available on the storage location '%1'. Please confirm that the storage location is not corrupted, and then create a new backup that you can use to perform a recovery from the storage location.

Fields

Message

The system catalog has been recovered from the backup storage location '%1'.

Fields

Message

The system catalog has been deleted.

Sigma Rules

• Backup Catalog Deleted
  Detects backup catalog deletions

Message

The backup operation that completed with warning(s) - Volume '%2' has developed new bad clusters. This may be an indication of problems with your hardware. %3 bytes have not been backed up because they could not be read. Please run the CHKDSK /R command on '%2' and then rerun the backup operation.

Fields

Message

The scheduled backup configuration conflicts with current Group Policy settings, error - '%1'. The scheduled backup operation has failed due to the conflict. Please update the settings for Group Policy or the scheduled backup.

Fields

Message

The backup operation that started at '%1' has failed because recovery planning is in progress through some other client. If multiple instances of the Recovery Wizard are running on the local computer or on a computer connected to the local computer, close these multiple instances and then rerun the backup operation.

Fields

Message

The scheduled backup configuration conflicts with current Group Policy settings, error - '%2'. The scheduled backup operation that started at '%1' failed due to the conflict. Please update the settings for Group Policy or for the scheduled backup.

Fields

Message

The backup operation that started at '%1' has failed because the Windows Server Backup engine could not be contacted, error code '%2'. Please confirm that the service is installed and enabled, and then rerun the backup operation.

Fields

Message

The scheduled backup operation that started at '%1' has failed because the schedule settings were not found. Please reconfigure the scheduled backup.

Fields

Message

The backup operation attempted at '%1' has failed to start, error code '%2' (%3). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Fields

Message

The backup operation that started at '%1' has encountered errors for the volume(s) '%2'. Log of files not successfully backed up '%3'.

Fields

Message

The backup operation that started at '%1' has failed because no backup storage location could be found. Please confirm that the backup storage location is attached and online, and then rerun the backup operation.

Fields

Message

The backup operation that started at '%1' has failed because the remote shared folder '%2' that you are using for a backup storage location is not writeable. Please make sure user '%3' has write permissions for this location, and then rerun the backup operation.

Fields

Message

The consistency check for the component '%1'\'%2' has failed. The application '%3' will not be available in the backup created at '%4'. Review the event details for information about consistency check issues.

Fields

Message

A scheduled backup has been configured to create a backup of '%1' daily at '%2'.

Fields

Message

The scheduled backup has been modified to create a backup of '%1' daily at '%2'.

Fields

Message

The scheduled backup was canceled. To create a new backup, you must reconfigure scheduled backups or run a one-time backup operation.

Message

A scheduled backup has been configured for this computer.

Message

The scheduled backup was canceled. To create a new backup, you must reconfigure scheduled backups or run a one-time backup operation.

Message

A new volume was detected that is not in the list of volumes to include in the backup. Please add it to the scheduled backup configuration if you want to protect this volume.

Message

A volume '%1' in the list of volumes to include in the backup is missing. This could be because the volume is dismounted, reformatted, or the disk is detached. Please correct the issue or remove the volume from the list to back up, and then rerun the backup operation.

Fields

Message

The operation to recover '%1' was attempted at '%2'.

Fields

Message

The operation to recover '%1' has successfully completed at '%2'.

Fields

Message

The operation to recover '%1' has completed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover '%1' has failed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover '%1' was canceled at '%2'.

Fields

Message

The operation to recover volume '%1' has failed or was canceled at '%2'. The volume may now be corrupted and may need to be reformatted. Run CHKDSK /R on the volume to look for corrupted sectors.

Fields

Message

The operation to recover '%1' has failed at '%2' because the volume that you are recovering to is too small. Please try recovering to a larger volume.

Fields

Message

The operation to recover '%1' has completed successfully at '%2'.

Fields

Message

The operation to recover '%1' has completed with errors at '%2'. Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover '%1' has failed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover '%1' was canceled at '%2'.

Fields

Message

The operation to recover component(s) '%1' has completed successfully at '%2'.

Fields

Message

The operation to recover component(s) '%1' has completed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover component(s) '%1' has failed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover component(s) '%1' was canceled at '%2'.

Fields

Message

The Block Level Backup Engine service has successfully started.

Message

The Block Level Backup Engine service has stopped.

Message

Installing the handler for the Block Level Backup Engine service has failed with error code '%1'.

Fields

Message

The Block Level Backup Engine service received an unknown request with code '%1'.

Fields

Message

The system state recovery operation started at '%1'.

Fields

Message

The system state recovery operation has completed.

Fields

Message

The system state recovery operation that started at '%1' has completed successfully.

Fields

Message

The system state recovery operation that started at '%1' was canceled.

Fields

Message

The system state recovery operation that started at '%1' has completed with errors. Error reported '%2'(%3). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The system state recovery operation that started at '%1' has failed with errors. Error reported '%2'(%3). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover Hyper-V component(s) has completed.

Fields

Message

The operation to recover Hyper-V component(s) that started at '%10' has completed successfully.

Fields

Message

The operation to recover Hyper-V component(s) has completed with errors. One or more components may not have been recovered correctly.

Fields

Message

The operation to recover Hyper-V component(s) has failed with errors.

Fields

Message

The operation to recover Hyper-V component(s) that started at '%10' was canceled.

Fields

Message

The operation to recover Hyper-V component(s) '%1' has completed successfully at '%2'.

Fields

Message

The operation to recover Hyper-V component(s) '%1' has completed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover Hyper-V component(s) '%1' has failed with errors at '%2'. Error reported '%3'(%4). Please review the event details for solutions, and then rerun the recovery operation once the issue is resolved.

Fields

Message

The operation to recover Hyper-V component(s) '%1' was canceled at '%2'.

Fields

Message

New Online backup provider registered.

Fields

Message

Online backup provider deregistered.

Message

Online backup has reported a status change.

Fields

Message

New Online backup provider registered.

Fields

Message

Online backup provider deregistered.