Microsoft-Windows-FailoverClustering-CsvFs-Diagnostic
110 events across 3 channels
Event ID 16 —
Event ID 16 — Activity Transfer.
Message
Event ID 256 —
Fields
| Name | Description |
|---|---|
Irp | — |
Volume | — |
VolumeId | — |
FileObject | — |
RelativeFileObject | — |
FileNameLength | — |
FileName | — |
DesiredAccess | — |
Options | — |
SharedAccess | — |
AttributeFlags | — |
Event ID 256 — Openning file %7.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
Volume | — |
VolumeId | — |
FileObject | — |
RelativeFileObject | — |
FileNameLength | — |
FileName | — |
DesiredAccess | — |
Options | — |
SharedAccess | — |
AttributeFlags | — |
Event ID 512 —
Fields
| Name | Description |
|---|---|
Irp | — |
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 512 — Closing file object %5.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 768 —
Fields
| Name | Description |
|---|---|
Irp | — |
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 768 — Cleaning file object %5.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 848 —
Fields
| Name | Description |
|---|---|
Scb | — |
Condition | — |
Reason | — |
Vcb | — |
VolumeId | — |
Status | — |
Event ID 848 — All file objects for the stream %1 are invalidated.
Message
Fields
| Name | Description |
|---|---|
Scb | — |
Condition | — |
Reason | — |
Vcb | — |
VolumeId | — |
Status | — |
Event ID 864 —
Fields
| Name | Description |
|---|---|
FileId | — |
FileIdHi | — |
Scb | — |
Condition | — |
Reason | — |
Volume | — |
VolumeId | — |
Status | — |
Event ID 864 — All file objects for the stream %3 of file id %2.
Message
Fields
| Name | Description |
|---|---|
FileId | — |
FileIdHi | — |
Scb | — |
Condition | — |
Reason | — |
Volume | — |
VolumeId | — |
Status | — |
Event ID 885 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Flags | — |
Reason | — |
Vcb | — |
VolumeId | — |
Status | — |
Event ID 885 — File handle %1 for the stream %2 is invalidated.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Flags | — |
Reason | — |
Vcb | — |
VolumeId | — |
Status | — |
Event ID 896 —
Fields
| Name | Description |
|---|---|
FileId | — |
FileIdHi | — |
FileNameLength | — |
FileName | — |
FileObject | — |
Ccb | — |
Scb | — |
Flags | — |
Reason | — |
Volume | — |
VolumeId | — |
Status | — |
Event ID 896 — File handle %5 for the stream %7 file id .
Message
Fields
| Name | Description |
|---|---|
FileId | — |
FileIdHi | — |
FileNameLength | — |
FileName | — |
FileObject | — |
Ccb | — |
Scb | — |
Flags | — |
Reason | — |
Volume | — |
VolumeId | — |
Status | — |
Event ID 1024 —
Fields
| Name | Description |
|---|---|
Vcb | — |
BytesPerSector | — |
BytesPerCluster | — |
BytesPerFileRecordSegment | — |
status | — |
Event ID 1024 — Query Volume Information completed with status %5.
Message
Fields
| Name | Description |
|---|---|
Vcb | — |
BytesPerSector | — |
BytesPerCluster | — |
BytesPerFileRecordSegment | — |
status | — |
Event ID 1280 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
Status | — |
Event ID 1280 — Down-level File Object %4 is opened with status %10.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
Status | — |
Event ID 1536 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 1536 — Down-level File Object %4 is closed.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 1792 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 1792 — Down-level File Object %4 is released.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 2048 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
Status | — |
Event ID 2048 — Paging File Object %3 is opened with status %9.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
Status | — |
Event ID 2304 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 2304 — Paging File Object %3 is closed.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 4096 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 4096 — Paging File Object %3 is released.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
FileNameLength | — |
FileName | — |
Event ID 6144 —
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
Irp | — |
MinorFunction | — |
Flags | — |
Process | — |
Offset | — |
Length | — |
Key | — |
FailImmediately | — |
Exclusive | — |
Event ID 6144 — Received Byte Range Lock Request %4.
Message
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
Irp | — |
MinorFunction | — |
Flags | — |
Process | — |
Offset | — |
Length | — |
Key | — |
FailImmediately | — |
Exclusive | — |
Event ID 6400 —
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
Irp | — |
MinorFunction | — |
Flags | — |
Process | — |
Offset | — |
Length | — |
Key | — |
FailImmediately | — |
Exclusive | — |
Status | — |
Event ID 6400 — Completed Byte Range Lock Request %4.
Message
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
Irp | — |
MinorFunction | — |
Flags | — |
Process | — |
Offset | — |
Length | — |
Key | — |
FailImmediately | — |
Exclusive | — |
Status | — |
Event ID 8192 —
Fields
| Name | Description |
|---|---|
File | — |
Irp | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Context | — |
Event ID 8192 — Removed Lock.
Message
Fields
| Name | Description |
|---|---|
File | — |
Irp | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Context | — |
Event ID 8208 —
Fields
| Name | Description |
|---|---|
File | — |
Process | — |
Status | — |
DownLevelStatus | — |
Event ID 8208 — Cleanup Locks.
Message
Fields
| Name | Description |
|---|---|
File | — |
Process | — |
Status | — |
DownLevelStatus | — |
Event ID 8224 —
Fields
| Name | Description |
|---|---|
File | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Status | — |
Event ID 8224 — Resume Lock.
Message
Fields
| Name | Description |
|---|---|
File | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Status | — |
Event ID 8272 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
OplockLevel | — |
Status | — |
Event ID 8272 — Resuming oplock to level %3 completed with status %4.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Scb | — |
OplockLevel | — |
Status | — |
Event ID 8448 —
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
FullPathLength | — |
FullPath | — |
OplockLevel | — |
IgnoreCurrentConditions | — |
Event ID 8448 — Enqueuing Single Client Notify.
Message
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
FullPathLength | — |
FullPath | — |
OplockLevel | — |
IgnoreCurrentConditions | — |
Event ID 8464 —
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
FullPathLength | — |
FullPath | — |
OplockLevel | — |
Status | — |
IsEventCompletion | — |
Event ID 8464 — Single Client Notify Completion.
Message
Fields
| Name | Description |
|---|---|
File | — |
Scb | — |
FullPathLength | — |
FullPath | — |
OplockLevel | — |
Status | — |
IsEventCompletion | — |
Event ID 8704 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CurrentState | — |
IsLocal | — |
Flags | — |
CountersName | — |
VolumeTargetPath | — |
FsTargetPath | — |
EnableCOW | — |
EnableDirectIo | — |
ForceWriteThrough | — |
TargetNodeId | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 8704 — Volume %2 transitioning from %3 to SetDownlevel.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CurrentState | — |
IsLocal | — |
Flags | — |
CountersName | — |
VolumeTargetPath | — |
FsTargetPath | — |
EnableCOW | — |
EnableDirectIo | — |
ForceWriteThrough | — |
TargetNodeId | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 8960 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CurrentState | — |
NewState | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 8960 — Volume %2 transitioning from %3 to %4.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CurrentState | — |
NewState | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 9216 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
State | — |
Source | — |
Status | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceStateTransitionStart | — |
Lifetime | — |
InvalidationReason | — |
Event ID 9216 — Volume %2 moved to state %3.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
State | — |
Source | — |
Status | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceStateTransitionStart | — |
Lifetime | — |
InvalidationReason | — |
Event ID 9296 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CountersName | — |
FromDirectIo | — |
Irp | — |
Status | — |
Source | — |
Parameter1 | — |
Parameter2 | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 9296 — Volume %2 is autopaused.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CountersName | — |
FromDirectIo | — |
Irp | — |
Status | — |
Source | — |
Parameter1 | — |
Parameter2 | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 9312 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CountersName | — |
CurrentState | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 9312 — Volume was renamed.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
CountersName | — |
CurrentState | — |
DcmSequenceId | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceLastStateTransition | — |
Lifetime | — |
Event ID 9328 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
Count | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceStateTransitionStart | — |
Lifetime | — |
Event ID 9328 — %3 IOs timed out on the volume %2.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
Count | — |
LastUptime | — |
CurrentDowntime | — |
TimeSinceStateTransitionStart | — |
Lifetime | — |
Event ID 9472 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
FileObject | — |
Vcb | — |
Scb | — |
Ccb | — |
FileNameLength | — |
FileName | — |
IrpFlags | — |
IrpContextFlags | — |
MajorFunction | — |
MinorFunction | — |
IrpSlFlags | — |
Control | — |
Parameter1 | — |
Parameter2 | — |
Parameter3 | — |
Parameter4 | — |
IrpContextFlagsUpper | — |
Event ID 9472 — Start IO %1 on %3 (%8).
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
FileObject | — |
Vcb | — |
Scb | — |
Ccb | — |
FileNameLength | — |
FileName | — |
IrpFlags | — |
IrpContextFlags | — |
MajorFunction | — |
MinorFunction | — |
IrpSlFlags | — |
Control | — |
Parameter1 | — |
Parameter2 | — |
Parameter3 | — |
Parameter4 | — |
IrpContextFlagsUpper | — |
Event ID 9728 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Event ID 9728 — Completed IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Event ID 9984 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 9984 — Posted IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 10240 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 10240 — Continue IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 10496 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
IrpContextFlags | — |
Status | — |
Information | — |
IrpContextFlagsUpper | — |
Event ID 10496 — Pause IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
IrpContextFlags | — |
Status | — |
Information | — |
IrpContextFlagsUpper | — |
Event ID 12288 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 12288 — Resume IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Event ID 12320 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Duration | — |
RedirectionReason | — |
Event ID 12320 — Direct IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Duration | — |
RedirectionReason | — |
Event ID 12336 —
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Duration | — |
RedirectionReason | — |
Event ID 12336 — Redirect IO %1.
Message
Fields
| Name | Description |
|---|---|
Irp | — |
IrpContext | — |
Status | — |
Information | — |
Duration | — |
RedirectionReason | — |
Event ID 12368 —
Fields
| Name | Description |
|---|---|
NodeId | — |
ReportCsvFs | — |
Event ID 12368 — Current Node Id %1.
Message
Fields
| Name | Description |
|---|---|
NodeId | — |
ReportCsvFs | — |
Event ID 12544 —
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
VpbFlags | — |
State | — |
CountersName | — |
VolumeTargetPath | — |
FsTargetPath | — |
EnableCOW | — |
EnableDirectIo | — |
ForceWriteThrough | — |
TargetNodeId | — |
Event ID 12544 — Volume %2, %5.
Message
Fields
| Name | Description |
|---|---|
Volume | — |
VolumeId | — |
VpbFlags | — |
State | — |
CountersName | — |
VolumeTargetPath | — |
FsTargetPath | — |
EnableCOW | — |
EnableDirectIo | — |
ForceWriteThrough | — |
TargetNodeId | — |
Event ID 12800 —
Fields
| Name | Description |
|---|---|
Vcb | — |
Scb | — |
ScbState | — |
ScbCondition | — |
ScbConditionStatus | — |
ScbDownlevelOplockLevel | — |
FileId | — |
Ccb | — |
CcbFlags | — |
ShadowFileObject | — |
RealFileObject | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
FileIdHi | — |
Event ID 12800 — File %13.
Message
Fields
| Name | Description |
|---|---|
Vcb | — |
Scb | — |
ScbState | — |
ScbCondition | — |
ScbConditionStatus | — |
ScbDownlevelOplockLevel | — |
FileId | — |
Ccb | — |
CcbFlags | — |
ShadowFileObject | — |
RealFileObject | — |
FileNameLength | — |
FileName | — |
CreateDisposition | — |
DesiredAccess | — |
SharedAccess | — |
CreateFlags | — |
AttributeFlags | — |
FileIdHi | — |
Event ID 13056 —
Fields
| Name | Description |
|---|---|
Scb | — |
File | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Context | — |
Event ID 13056 — Lock.
Message
Fields
| Name | Description |
|---|---|
Scb | — |
File | — |
Process | — |
Offset | — |
Length | — |
Key | — |
Exclusive | — |
Context | — |
Event ID 16384 —
Fields
| Name | Description |
|---|---|
TunnelOperationCode | — |
TunnelActivityId | — |
status | — |
Event ID 16384 — Tunnel operation %1.
Message
Fields
| Name | Description |
|---|---|
TunnelOperationCode | — |
TunnelActivityId | — |
status | — |
Event ID 20480 —
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
Flags | — |
status | — |
Event ID 20480 — Stream was flushed and purged from offset %2, length %3.
Message
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
Flags | — |
status | — |
Event ID 24576 —
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
status | — |
Event ID 24576 — Stream was flushed from offset %2, length %3.
Message
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
status | — |
Event ID 28672 —
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
status | — |
Event ID 28672 — Stream was purged from offset %2, length %3.
Message
Fields
| Name | Description |
|---|---|
Scb | — |
FileOffset | — |
Length | — |
status | — |
Event ID 32768 —
Fields
| Name | Description |
|---|---|
Vcb | — |
status | — |
Event ID 32768 — Volume was purged.
Message
Fields
| Name | Description |
|---|---|
Vcb | — |
status | — |
Event ID 36864 —
Fields
| Name | Description |
|---|---|
Vcb | — |
Scb | — |
FileId | — |
Ccb | — |
ShadowFileObject | — |
FileNameLength | — |
FileName | — |
BookmarkLength | — |
Bookmark | — |
FileIdHi | — |
Event ID 36864 — Bookmark.
Message
Fields
| Name | Description |
|---|---|
Vcb | — |
Scb | — |
FileId | — |
Ccb | — |
ShadowFileObject | — |
FileNameLength | — |
FileName | — |
BookmarkLength | — |
Bookmark | — |
FileIdHi | — |
Event ID 40960 —
Fields
| Name | Description |
|---|---|
MaxLookAsideDepth | — |
CpuCount | — |
Status | — |
Event ID 40960 — Driver loaded.
Message
Fields
| Name | Description |
|---|---|
MaxLookAsideDepth | — |
CpuCount | — |
Status | — |
Event ID 45056 —
Fields
| Name | Description |
|---|---|
FileObject | — |
ProcessId | — |
Status | — |
Event ID 45056 — Cluster service connected.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
ProcessId | — |
Status | — |
Event ID 49152 —
Fields
| Name | Description |
|---|---|
FileObject | — |
ProcessId | — |
Event ID 49152 — Cluster service disconnected.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
ProcessId | — |
Event ID 53248 —
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
Operation | — |
SyncType | — |
Status | — |
Event ID 53248 — Data section created.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
Operation | — |
SyncType | — |
Status | — |
Event ID 57344 —
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
Event ID 57344 — Shared Cahce Map Initialized.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
Event ID 61440 —
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
TruncateSize | — |
HasEvent | — |
Result | — |
Event ID 61440 — Shared Cahce Map Uninitialized.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
FileNameLength | — |
FileName | — |
Scb | — |
Ccb | — |
TruncateSize | — |
HasEvent | — |
Result | — |
Event ID 61696 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Fcb | — |
FileId | — |
FileIdHi | — |
StreamId | — |
OplockLevel | — |
Flags | — |
Offset | — |
Length | — |
Data | — |
Status | — |
Event ID 61696 — Capture full payload.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Fcb | — |
FileId | — |
FileIdHi | — |
StreamId | — |
OplockLevel | — |
Flags | — |
Offset | — |
Length | — |
Data | — |
Status | — |
Event ID 61952 —
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Fcb | — |
FileId | — |
FileIdHi | — |
StreamId | — |
OplockLevel | — |
Flags | — |
Offset | — |
Length | — |
FragmentOffset | — |
FragmentLength | — |
Data | — |
Status | — |
Event ID 61952 — Capture payload segment.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
Ccb | — |
Scb | — |
Fcb | — |
FileId | — |
FileIdHi | — |
StreamId | — |
OplockLevel | — |
Flags | — |
Offset | — |
Length | — |
FragmentOffset | — |
FragmentLength | — |
Data | — |
Status | — |