Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic

90 events across 3 channels

EventTitleChannel
1Event ID 1Operational
1Disk DeviceId has arrived.Operational
2Event ID 2Operational
2Disk DeviceId is claimed by clusbflt.Operational
3Event ID 3Operational
3Disk DeviceId is not claimed by clusbflt, Status Status.Operational
8Event ID 8Operational
8Disk DeviceId was removed.Operational
51Event ID 51Operational
51Enclosure arrivedOperational
52Event ID 52Operational
52Enclosure removedOperational
101Event ID 101Operational
101Path PathId (attributes=Attributes, type=PathType) was created for device …Operational
102Event ID 102Operational
102Path PathId (attributes=Attributes, type=PathType) was removed for device …Operational
103Event ID 103Operational
103Path PathId (attributes=Attributes, down path=DownPathId) was paused for device …Operational
104Event ID 104Operational
104Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device …Operational
105Event ID 105Operational
105Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout …Operational
151Event ID 151Operational
151Received request to update membership to Membership, flags = Flags.Connectivity
152Event ID 152Operational
152Completed request to update membership to Membership, flags = Flags, status …Connectivity
153Event ID 153Operational
153Completed request to set registration key to RegistrationKey, status Status.Connectivity
154Event ID 154Operational
154Client cluster with Id ClusterId and instance id InstanceId registered.Connectivity
155Event ID 155Operational
155Client cluster with Id ClusterId and instance id InstanceId unregistered on …Connectivity
156Event ID 156Operational
156Client cluster with Id ClusterId and instance id InstanceId unregistered because …Connectivity
157Event ID 157Operational
157Received client cluster membership update from node id NodeId.Connectivity
158Event ID 158Operational
158Applied client cluster membership update from node id NodeId.Connectivity
159Event ID 159Operational
159Target create for cluster node id NodeId for path PathId with cluster Id …Connectivity
160Event ID 160Operational
160Target create request rejected from cluster node id NodeId for path PathId with …Connectivity
201Event ID 201Operational
201Node NodeId connected to path PathId device DeviceId.Connectivity
202Event ID 202Operational
202Node NodeId disconnected from path PathId device DeviceId.Connectivity
251Event ID 251Operational
251Remove all partitions from device DeviceGuid (DeviceId), Status=Status.Operational
252Event ID 252Operational
252Trim device DeviceGuid (DeviceId), Status=Status.Operational
253Event ID 253Operational
253Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.Operational
254Event ID 254Operational
254Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.Operational
255Event ID 255Operational
255Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), …Operational
256Event ID 256Operational
256Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve …Operational
257Event ID 257Operational
257Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition …Operational
258Event ID 258Operational
258UnBind Hdd device DeviceGuid (DeviceId), Options Options, …Operational
259Event ID 259Operational
259Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id …Operational
260Event ID 260Operational
260Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id …Operational
261Event ID 261Operational
261Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid …Operational
301Event ID 301Operational
301Runtime error in Function@LineNumber, Status=Status.Operational
351Event ID 351Operational
351Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId …Operational
352Event ID 352Operational
352Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId …Operational
353Event ID 353Operational
353Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId …Operational
401Event ID 401Operational
401Data mismatch detected at bottom layer.Operational
402Event ID 402Operational
402Data mismatch detected at top layer.Operational
403Event ID 403Operational
403Data mismatch detected at standby.Operational
404Event ID 404Operational
404Bad IO completion at bottom layer.Operational
405Event ID 405Operational
405Bad IO completion at top layer.Operational
406Event ID 406Operational
406Overlapping IOs detectedOperational
407Event ID 407Operational
407Prohibited IOCTL was rejected.Operational

Event ID 1:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk has arrived.

Fields #

NameDescription
DeviceId Int32

Event ID 1: Disk DeviceId has arrived.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
DiskActivity

Description

Disk DeviceId has arrived.

Message #

Disk %1 has arrived

Fields #

NameDescription
DeviceId Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 1,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T03:12:00.2164233+00:00",
    "event_record_id": 5,
    "correlation": {
      "ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
    },
    "execution": {
      "process_id": 4,
      "thread_id": 440
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "DeviceId": "0"
  },
  "message": "Disk 0 has arrived"
}

Event ID 2:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk is claimed by clusbflt.

Fields #

NameDescription
DeviceId Int32

Event ID 2: Disk DeviceId is claimed by clusbflt.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk DeviceId is claimed by clusbflt.

Message #

Disk %1 is claimed by clusbflt

Fields #

NameDescription
DeviceId Int32

Event ID 3:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk is not claimed by clusbflt, Status.

Fields #

NameDescription
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 3: Disk DeviceId is not claimed by clusbflt, Status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
DiskActivity

Description

Disk DeviceId is not claimed by clusbflt, Status Status.

Message #

Disk %1 is not claimed by clusbflt, Status %2

Fields #

NameDescription
DeviceId Int32
Status HexInt32NTSTATUS reference

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 3,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T03:12:00.2164770+00:00",
    "event_record_id": 6,
    "correlation": {
      "ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
    },
    "execution": {
      "process_id": 4,
      "thread_id": 440
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "DeviceId": "0",
    "Status": "0xc0000174"
  },
  "message": "Disk 0 is not claimed by clusbflt, Status Tape partition information could not be found when loading a tape."
}

Event ID 8:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk was removed.

Fields #

NameDescription
DeviceId Int32

Event ID 8: Disk DeviceId was removed.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk DeviceId was removed.

Message #

Disk %1 was removed

Fields #

NameDescription
DeviceId Int32

Event ID 51:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure arrived.

Event ID 51: Enclosure arrived

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure arrived.

Message #

Enclosure arrived

Event ID 52:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure removed.

Event ID 52: Enclosure removed

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure removed.

Message #

Enclosure removed

Event ID 101:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, type=) was created for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 101: Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
PathActivity

Description

Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.

Message #

Path %1 (attributes=%3, type=%4) was created for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 101,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T02:33:58.0651744+00:00",
    "event_record_id": 2,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 7116
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "PathId": "1",
    "DeviceId": "-1",
    "Attributes": "0x0",
    "PathType": "0x0"
  },
  "message": "Path 1 (attributes=0x0, type=0x0) was created for device -1"
}

Event ID 102:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, type=) was removed for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 102: Path PathId (attributes=Attributes, type=PathType) was removed for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, type=PathType) was removed for device DeviceId.

Message #

Path %1 (attributes=%3, type=%4) was removed for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 103:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was paused for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 103: Path PathId (attributes=Attributes, down path=DownPathId) was paused for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was paused for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was paused for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 104:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was resumed for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 104: Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was resumed for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 105:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was resumed on timeout for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 105: Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was resumed on timeout for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 151:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Received request to update membership to , flags =.

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 151: Received request to update membership to Membership, flags = Flags.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Received request to update membership to Membership, flags = Flags.

Message #

Received request to update membership to %1, flags = %2

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 152:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Completed request to update membership to , flags = , status.

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 152: Completed request to update membership to Membership, flags = Flags, status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Completed request to update membership to Membership, flags = Flags, status Status.

Message #

Completed request to update membership to %1, flags = %2, status %3

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 153:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Completed request to set registration key to , status.

Fields #

NameDescription
RegistrationKey HexInt64
Status HexInt32NTSTATUS reference

Event ID 153: Completed request to set registration key to RegistrationKey, status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Completed request to set registration key to RegistrationKey, status Status.

Message #

Completed request to set registration key to %1, status %2

Fields #

NameDescription
RegistrationKey HexInt64
Status HexInt32NTSTATUS reference

Event ID 154:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id registered.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 154: Client cluster with Id ClusterId and instance id InstanceId registered.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId registered.

Message #

Client cluster with Id %1 and instance id %2 registered.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 155:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id unregistered on client request.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 155: Client cluster with Id ClusterId and instance id InstanceId unregistered on client request.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId unregistered on client request.

Message #

Client cluster with Id %1 and instance id %2 unregistered on client request.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 156:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id unregistered because no hearbeat was received for 1 minute.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 156: Client cluster with Id ClusterId and instance id InstanceId unregistered because no hearbeat was received for 1 minute.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId unregistered because no hearbeat was received for 1 minute.

Message #

Client cluster with Id %1 and instance id %2 unregistered because no hearbeat was received for 1 minute.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 157:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64
CurrentClusterId GUID
CurrentInstanceId GUID
CurrentSequenceNumber HexInt32
CurrentMembershipMask HexInt64

Event ID 157: Received client cluster membership update from node id NodeId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.

Message #

Received client cluster membership update from node id %1. Cluster Id %2, instance id %3, membership sequence %4, nodeset mask %5. Existing cluster id %6, instance id %7, membership sequence %8, nodeset mask %9

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64
CurrentClusterId GUID
CurrentInstanceId GUID
CurrentSequenceNumber HexInt32
CurrentMembershipMask HexInt64

Event ID 158:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Applied client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask .

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64

Event ID 158: Applied client cluster membership update from node id NodeId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Applied client cluster membership update from node id NodeId. Cluster Id ClusterId, instance id InstanceId, membership sequence SequenceNumber, nodeset mask MembershipMask.

Message #

Applied client cluster membership update from node id %1. Cluster Id %2, instance id %3, membership sequence %4, nodeset mask %5.

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64

Event ID 159:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Target create for cluster node id for path with cluster Id , instance id . Existing cluster id , instance id . Status=.

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID
Status HexInt32NTSTATUS reference

Event ID 159: Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Level
Informational
Task
ClusterActivity

Description

Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId. Status=Status.

Message #

Target create for cluster node id %1 for path %2 with cluster Id %3, instance id %4. Existing cluster id %5, instance id %6. Status=%7

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID
Status HexInt32NTSTATUS reference

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 159,
    "version": 0,
    "level": 4,
    "task": 4,
    "opcode": 0,
    "keywords": 1152921504606846976,
    "time_created": "2026-05-30T02:33:58.1358814+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 5276
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Connectivity",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "NodeId": "0",
    "PathId": "1",
    "ClusterId": "{00000000-0000-0000-0000-000000000000}",
    "InstanceId": "{00000000-0000-0000-0000-000000000000}",
    "CurrentClusterId": "{00000000-0000-0000-0000-000000000000}",
    "CurrentInstanceId": "{00000000-0000-0000-0000-000000000000}",
    "Status": "0x0"
  },
  "message": "Target create for cluster node id 0 for path 1 with cluster Id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Existing cluster id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Status=STATUS_SUCCESS"
}

Event ID 160:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Target create request rejected from cluster node id for path with cluster Id , instance id . Existing cluster id , instance id .

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID

Event ID 160: Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId.

Message #

Target create request rejected from cluster node id %1 for path %2 with cluster Id %3, instance id %4. Existing cluster id %5, instance id %6.

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID

Event ID 201:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
NodeActivity

Description

Node connected to path device.

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 201: Node NodeId connected to path PathId device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
NodeActivity

Description

Node NodeId connected to path PathId device DeviceId.

Message #

Node %1 connected to path %2 device %3

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 202:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
NodeActivity

Description

Node disconnected from path device.

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 202: Node NodeId disconnected from path PathId device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
NodeActivity

Description

Node NodeId disconnected from path PathId device DeviceId.

Message #

Node %1 disconnected from path %2 device %3

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 251:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Remove all partitions from device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 251: Remove all partitions from device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Remove all partitions from device DeviceGuid (DeviceId), Status=Status.

Message #

Remove all partitions from device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 252:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Trim device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 252: Trim device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Trim device DeviceGuid (DeviceId), Status=Status.

Message #

Trim device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 253:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Hdd Cache partition on device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 253: Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

Message #

Create Hdd Cache partition on device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 254:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Hdd Cache partition on device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 254: Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

Message #

Initialize Hdd Cache partition on device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 255:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Ssd Cache Store partition on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 255: Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Initialize Ssd Cache Store partition on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 256:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Ssd Cache Store partition on device (), Reserve percent, UnusedSize , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
ReservePercentage Int32
UnusedSize Int64
Status HexInt32NTSTATUS reference

Event ID 256: Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.

Message #

Create Ssd Cache Store partition on device %1 (%2), Reserve %3 percent, UnusedSize %4, Status=%5.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
ReservePercentage Int32
UnusedSize Int64
Status HexInt32NTSTATUS reference

Event ID 257:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Bind Hdd device () to Cache Store Partition on device (), Attributes , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
CacheStoreDeviceGuid GUID
CacheStoreDeviceId Int32
Attributes HexInt32
Status HexInt32NTSTATUS reference

Event ID 257: Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.

Message #

Bind Hdd device %1 (%2) to Cache Store Partition %3 on device %4 (%5), Attributes %6, Status=%7.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
CacheStoreDeviceGuid GUID
CacheStoreDeviceId Int32
Attributes HexInt32
Status HexInt32NTSTATUS reference

Event ID 258:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

UnBind Hdd device (), Options , AddedMissingPages=, Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Options HexInt32
AddedMissingPages HexInt32
Status HexInt32NTSTATUS reference

Event ID 258: UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.

Message #

UnBind Hdd device %1 (%2), Options %3, AddedMissingPages=%4, Status=%5.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Options HexInt32
AddedMissingPages HexInt32
Status HexInt32NTSTATUS reference

Event ID 259:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disable Binding on Sdd device (), Partition Id , Binding , Hdd Device , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Status HexInt32NTSTATUS reference

Event ID 259: Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.

Message #

Disable Binding on Sdd device %1 (%2), Partition Id %3, Binding %4, Hdd Device %5, Status=%6.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Status HexInt32NTSTATUS reference

Event ID 260:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Set Binding Attributes on device (), Partition Id , Binding , Hdd Device , Attributes(mask) (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Attributes HexInt32
AttributesMask HexInt32
Status HexInt32NTSTATUS reference

Event ID 260: Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.

Message #

Set Binding Attributes on device %1 (%2), Partition Id %3, Binding %4, Hdd Device %5, Attributes(mask) %6(%7), Status=%8.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Attributes HexInt32
AttributesMask HexInt32
Status HexInt32NTSTATUS reference

Event ID 261:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disabled Read and Write Cache on Ssd Cache Store partition on device (), PartitionId due to IO Error=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 261: Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.

Message #

Disabled Read and Write Cache on Ssd Cache Store partition on device %1 (%2), PartitionId %3 due to IO Error=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 301:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
Runtime

Description

Runtime error in @, Status=.

Fields #

NameDescription
Function AnsiString
LineNumber Int32
Status HexInt32NTSTATUS reference

Event ID 301: Runtime error in Function@LineNumber, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Warning
Task
Runtime

Description

Runtime error in Function@LineNumber, Status=Status.

Message #

Runtime error in %1@%2, Status=%3.

Fields #

NameDescription
Function AnsiString
Line Number
Status HexInt32NTSTATUS reference
LineNumber Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 301,
    "version": 0,
    "level": 3,
    "task": 7,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T02:33:58.0651726+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 7116
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Function": "TargetMgrImpl::AddPath",
    "Line Number": "1184",
    "Status": "0xc0000034"
  },
  "message": "Runtime error in TargetMgrImpl::AddPath@1184, Status=Object Name not found.."
}

Event ID 351:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Starting to load Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 351: Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Starting to load Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 352:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Loaded Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 352: Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Loaded Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 353:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Failed to load Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 353: Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Failed to load Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 401:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at bottom layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 401: Data mismatch detected at bottom layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at bottom layer. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 402:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at top layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 402: Data mismatch detected at top layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at top layer. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 403:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at standby. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 403: Data mismatch detected at standby.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at standby. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at standby. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 404:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at bottom layer. Disk , io_offset=, io_length=, status=, informational=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 404: Bad IO completion at bottom layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.

Message #

Bad IO completion at bottom layer. Disk %2, io_offset=%3, io_length=%4, status=%5, informational=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 405:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at top layer. Disk , io_offset=, io_length=, status=, informational=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 405: Bad IO completion at top layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.

Message #

Bad IO completion at top layer. Disk %2, io_offset=%3, io_length=%4, status=%5, informational=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 406:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Overlapping IOs detected.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
ExistingIOOffset HexInt64
ExistingIOLength HexInt32

Event ID 406: Overlapping IOs detected

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Overlapping IOs detected.

Message #

Overlapping IOs detected

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
ExistingIOOffset HexInt64
ExistingIOLength HexInt32

Event ID 407:

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Prohibited IOCTL was rejected. Disk , ioctl=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOCTL HexInt32

Event ID 407: Prohibited IOCTL was rejected.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Prohibited IOCTL was rejected. Disk DeviceNumber, ioctl=IOCTL.

Message #

Prohibited IOCTL was rejected. Disk %2, ioctl=%3

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOCTL HexInt32

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 923bcb94-58d2-42be-bba9-b1315f363838

Defined in ClusBflt.sys, the binary that emits these events.

Observed on:

  • WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.2849 · captured 2026-06-02

Downloads

Credits

  • Microsoft - authored the ETW manifests and PDBs the schema comes from
  • jdu2600 - the event-schema TSV format this catalog adopted
  • nasbench - the tool that dumps registered providers and manifests