Microsoft-Windows-FailoverClustering

762 events across 6 channels

Event ID	Title	Channel
1000		Operational
1000	Cluster service suffered an unexpected fatal error at line Parameter1 of source …	System
1001		Operational
1001	Cluster service failed a validity check on line Parameter1 of source module …	System
1002		Operational
1002	Cluster service handled an unexpected error at line Parameter1 of source module …	System
1006		Operational
1006	Cluster service was halted due to incomplete connectivity with other cluster …	System
1007	A new node, NodeName, has been added to the failover cluster.	Operational
1011		Operational
1011	Cluster node NodeName has been evicted from the failover cluster.	System
1024		Operational
1024	The registry checkpoint for cluster resource 'ResourceName' could not be …	System
1034		Operational
1034	Cluster physical disk resource 'ResourceName' cannot be brought online because …	System
1035		Operational
1035	While disk resource 'ResourceName' was being brought online, access to one or …	System
1037		Operational
1037	The file system for one or more partitions on the disk for resource …	System
1038		Operational
1038	Ownership of cluster disk 'ResourceName' has been unexpectedly lost by this …	System
1039		Operational
1039	Generic application 'ResourceName' could not be brought online (with error …	System
1040		Operational
1040	Generic service 'ResourceName' could not be brought online (with error 'Status') …	System
1041		Operational
1041	Generic service 'ResourceName' could not be brought online (with error 'Status') …	System
1042		Operational
1042	Generic service 'ResourceName' failed with error 'Status'.	System
1044		Operational
1044	Encountered a failure when attempting to create a new NetBIOS interface while …	System
1045		Operational
1045	No matching network interface found for resource 'ResourceName' IP address …	System
1046		Operational
1046	Cluster IP address resource 'ResourceName' cannot be brought online because the …	System
1047		Operational
1047	Cluster IP address resource 'ResourceName' cannot be brought online because the …	System
1048		Operational
1048	Cluster IP address resource 'ResourceName' failed to come online.	System
1049		Operational
1049	Cluster IP address resource 'ResourceName' cannot be brought online because a …	System
1050		Operational
1050	Cluster network name resource 'ResourceName' cannot be brought online because …	System
1051		Operational
1051	Cluster network name resource 'ResourceName' cannot be brought online.	System
1052		Operational
1052	Cluster Network Name resource 'ResourceName' cannot be brought online because …	System
1053		Operational
1053	Cluster File Share 'ResourceName' cannot be brought online because the share …	System
1054		Operational
1054	Health check for file share resource 'ResourceName' failed.	System
1055		Operational
1055	Health check for file share resource 'ResourceName' failed.	System
1057		Operational
1057	The cluster database could not be loaded.	System
1061	The Cluster service successfully formed the failover cluster 'ClusterName'.	Operational
1062	This node has successfully joined the failover cluster 'ClusterName'.	Operational
1063	The Cluster service was successfully stopped.	Operational
1066		Operational
1066	Cluster disk resource 'ResourceName' indicates corruption for volume 'VolumeID'.	System
1068		Operational
1068	Cluster file share resource 'ResourceName' cannot be brought online.	System
1069		Operational
1069	Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.	System
1070		Operational
1070	The node failed to join failover cluster 'ClusterName' due to error code …	System
1071		Operational
1071	The operation attempted on cluster resource 'ResourceName' of type 'ResTypeDll' …	System
1073		Operational
1073	The Cluster service was halted to prevent an inconsistency within the failover …	System
1077		Operational
1077	Health check for IP interface 'ResourceName' (address 'IPAddress') failed …	System
1078		Operational
1078	Cluster IP address resource 'ResourceName' cannot be brought online because WINS …	System
1080		Operational
1080	The Cluster service failed to update the cluster database (error code 'Status').	System
1090		Operational
1090	The Cluster service cannot be started.	System
1092		Operational
1092	Failed to form cluster 'ClusterName' with error code 'Status'.	System
1093		Operational
1093	The Cluster service cannot identify node 'NodeName' as a member of failover …	System
1094		Operational
1094	The cluster common property SecurityLevel cannot be changed on this cluster.	System
1105		Operational
1105	The Cluster service failed to start because it was unable to register …	System
1116	Cluster network name resource 'ResourceName' failed to renew its DNS …	Operational
1119		Operational
1119	Cluster network name resource 'ResourceName' failed to register DNS name 'Name' …	System
1121		Operational
1121	Encrypted settings for cluster resource 'ResourceName' could not be successfully …	System
1125	Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network …	Operational
1126		Operational
1126	Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network …	System
1127		Operational
1127	Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network …	System
1128	Cluster network 'NetworkName' is operational (up).	Operational
1129		Operational
1129	Cluster network 'NetworkName' is partitioned.	System
1130		Operational
1130	Cluster network 'NetworkName' is down.	System
1131	Cluster network interface 'InterfaceName' was added for node 'NodeName' on …	Operational
1132	Cluster network interface 'InterfaceName' for node 'NodeName' on network …	Operational
1133	Cluster network 'NetworkName' was added to the failover cluster.	Operational
1134	Cluster network 'NetworkName' was removed from the failover cluster.	Operational
1135		Operational
1135	Cluster node 'NodeName' was removed from the active failover cluster membership.	System
1136		Operational
1136	The cluster service has detected an Azure host maintenance event is about to …	System
1137		Operational
1137	Move of cluster role 'ResourceGroup' for drain could not be completed.	System
1138		Operational
1138	Cluster file share resource 'ResourceName' cannot be brought online.	System
1139		Operational
1139	The cluster service has detected an Azure host maintenance event has been …	System
1140		Operational
1140	The cluster service has detected an Azure host maintenance event has been …	System
1141		Operational
1141	Cluster file share resource 'ResourceName' cannot be brought online.	System
1142		Operational
1142	Cluster file share resource 'ResourceName' for DFS Namespace cannot be brought …	System
1146		Operational
1146	The cluster Resource Hosting Subsystem (RHS) process was terminated and will be …	System
1149		Operational
1149	The DNS Host (A) and Pointer (PTR) records associated with Cluster resource …	System
1150		Operational
1150	The removal of the DNS Pointer (PTR) record 'PTRRecord' for host 'HostName' …	System
1151		Operational
1151	The removal of the DNS Host (A) record 'ARecord' associated with the cluster …	System
1153	The Cluster service is attempting to fail over the clustered role …	Operational
1154	The Cluster service is attempting to fail back the clustered role …	Operational
1155		Operational
1155	The pending move for the role 'ResourceGroup' did not complete.	System
1156	Cluster resource 'ResourceName' was added to the failover cluster.	Operational
1157	Cluster resource 'ResourceName' was removed from the failover cluster.	Operational
1158	Cluster role 'ResourceGroup' was added to the failover cluster.	Operational
1159	Cluster role 'ResourceGroup' was removed from the failover cluster.	Operational
1177		Operational
1177	The Cluster service is shutting down because quorum was lost.	System
1181		Operational
1181	Cluster resource 'ResourceName' cannot be brought online because the associated …	System
1182		Operational
1182	Cluster resource 'ResourceName' cannot be brought online because the associated …	System
1183		Operational
1183	Cluster disk resource 'ResourceName' contains an invalid mount point.	System
1186	The password associated with the Cluster service domain account is being updated …	Operational
1190	Cluster network name resource 'ResourceName' successfully deleted its associated …	Operational
1191		Operational
1191	Cluster network name resource 'ResourceName' failed to delete its associated …	System
1192		Operational
1192	Cluster network name resource 'ResourceName' failed to delete its associated …	System
1193		Operational
1193	Cluster network name resource 'ResourceName' failed to create its associated …	System
1194		Operational
1194	Cluster network name resource 'ResourceName' failed to create its associated …	System
1195		Operational
1195	Cluster network name resource 'ResourceName' failed registration of one or more …	System
1196		Operational
1196	Cluster network name resource 'ResourceName' failed registration of one or more …	System
1197		Operational
1197	Cluster network name resource 'ResourceName' failed to delete or disable its …	System
1198		Operational
1198	Cluster network name resource 'ResourceName' failed to delete computer object …	System
1200	The Cluster service is attempting to bring the clustered role 'ResourceGroup' …	Operational
1201	The Cluster service successfully brought the clustered role 'ResourceGroup' …	Operational
1203	The Cluster service is attempting to bring the clustered role 'ResourceGroup' …	Operational
1204	The Cluster service successfully brought the clustered role 'ResourceGroup' …	Operational
1205		Operational
1205	The Cluster service failed to bring clustered role 'ResourceGroup' completely …	System
1206		Operational
1206	The computer object associated with the cluster network name resource …	System
1207		Operational
1207	The computer object associated with the cluster network name resource …	System
1208		Operational
1208	Cluster disk resource 'ResourceName' contains an invalid mount point.	System
1209	Cluster service is requesting a bus reset for device 'Parameter1'.	Operational
1211		Operational
1211	Cluster network name resource 'ResourceName' cannot be brought online.	System
1212		Operational
1212	Cluster network name resource 'ResourceName' cannot be brought online.	System
1213		Operational
1213	Cluster network name resource 'ResourceName' could not completely rename the …	System
1214		Operational
1214	Cluster Network Name resource cannot be registered with Netbios.	System
1215		Operational
1215	Cluster network name resource 'ResourceName' failed a health check.	System
1216		Operational
1216	A name change operation on the cluster core netname resource has failed.	System
1217	Cluster network name resource 'ResourceName' successfully changed the name …	Operational
1218		Operational
1218	Cluster network name resource 'ResourceName' failed to perform a name change …	System
1219		Operational
1219	Cluster network name resource 'ResourceName' failed to perform a name change …	System
1220		Operational
1220	The computer account for resource 'ResourceName' failed to be renamed from …	System
1221		Operational
1221	Cluster network name resource 'ResourceName' has a name 'Name' which does not …	System
1222		Operational
1222	The computer object associated with cluster network name resource 'ResourceName' …	System
1223		Operational
1223	Cluster IP address resource 'ResourceName' cannot be brought online because the …	System
1224	Cluster IP address resource 'ResourceName' has been moved to cluster network …	Operational
1226		Operational
1226	Network Name resource 'ResourceName' (with associated network name …	System
1227		Operational
1227	Network Name resource 'ResourceName' (with associated network name …	System
1228		Operational
1228	Cluster network name resource 'ResourceName' encountered an error enabling the …	System
1229		Operational
1229	Cluster network name resource 'ResourceName' was unable to identify any IP …	System
1230		Operational
1230	A component on the server did not respond in a timely fashion.	System
1231		Operational
1231	Cluster network name resource 'ResourceName' encountered an error logging on to …	System
1232		Operational
1232	Entry point 'Parameter2' in cluster generic script resource 'ResourceName' did …	System
1233		Operational
1233	Cluster generic script resource 'ResourceName': request to perform the …	System
1234		Operational
1234	The Cluster service has detected that its service account is missing one or more …	System
1237	Cluster resource 'ResourceName' entered maintenance mode.	Operational
1238	Cluster resource 'ResourceName' exited maintenance mode.	Operational
1239	Cluster IP address resource 'ResourceName' obtained a leased IP address …	Operational
1240		Operational
1240	Cluster IP address resource 'ResourceName' failed to obtain a leased IP address.	System
1241	Cluster IP address resource 'ResourceName' released lease of IP address …	Operational
1242		Operational
1242	Lease of IP address 'IPAddress' associated with cluster IP address resource …	System
1243		Operational
1243	Cluster IP address resource 'ResourceName' failed to release the lease for IP …	System
1244	Cluster IP address resource 'ResourceName' renewed the lease for IP address …	Operational
1245		Operational
1245	Cluster IP address resource 'ResourceName' failed to renew the lease for IP …	System
1246	Settings have changed for cluster network 'NetworkName' which affect cluster IP …	Operational
1247		Operational
1247	The Security Identifier (SID) type for the cluster service is configured as …	System
1248		Operational
1248	The Security Identifier (SID) 'ServiceSID' associated with the cluster service …	System
1249	Cluster IPv6 tunnel address resource 'ResourceName' has been updated to match …	Operational
1250		Operational
1250	Cluster resource 'ResourceName' in clustered role 'ResourceGroup' has received a …	System
1251		Operational
1251	Clustered role 'Preemptee' was taken offline.	System
1252	Cluster resource 'ResourceName' in clustered role 'GroupName' rejected a move …	Operational
1253	Resource 'ResourceName' of the clustered role 'GroupName' vetoed the untargeted …	Operational
1254		Operational
1254	Clustered role 'ResourceGroup' has exceeded its failover threshold.	System
1255		Operational
1255	Cluster resource 'ResourceName' in clustered role 'ResourceGroup' has received a …	System
1256		Operational
1256	Cluster network name resource failed registration of one or more associated DNS …	System
1257		Operational
1257	Cluster network name resource failed registration of one or more associated DNS …	System
1258		Operational
1258	Cluster network name resource failed registration of one or more associated DNS …	System
1259		Operational
1259	Cluster network name resource failed registration of one or more associated DNS …	System
1260		Operational
1260	Cluster network name resource failed to modify the DNS registration.	System
1261		Operational
1261	Cluster network name resource failed to modify the DNS registration.	System
1263		Operational
1263	Cluster network name resource failed to publish the PTR record in the DNS …	System
1264		Operational
1264	Cluster network name resource failed to publish the PTR record in the DNS …	System
1265		Operational
1265	Cluster resource type 'ResourceTypeName' timed out while processing the control …	System
1280	Sponsor tried to Create Security Context using Package='PackageName' with …	Operational
1281	Joiner tried to Create Security Context using Package='PackageName' with Context …	Operational
1282		Operational
1282	Security Handshake between local and remote endpoints 'ConnectionInfo' did not …	System
1289		Operational
1289	The Cluster Service was unable to access network adapter 'NetftDisplayName'.	System
1360		Operational
1360	Cluster IP address resource 'ResourceName' failed to come online.	System
1361		Operational
1361	IPv6 Tunnel address resource 'ResourceName' failed to come online because it …	System
1362		Operational
1362	Cluster IP address resource 'ResourceName' failed to come online because the …	System
1363		Operational
1363	IPv6 tunnel address resource 'ResourceName' failed to come online.	System
1537	A backup operation of the cluster configuration data has been initiated.	Operational
1538	The backup operation for the cluster configuration data completed successfully.	Operational
1539	A restore operation of the cluster configuration data has been initiated.	Operational
1540	The restore operation for the cluster configuration data completed successfully.	Operational
1541		Operational
1541	The backup operation for the cluster configuration data has been aborted because …	System
1542		Operational
1542	The restore request for the cluster configuration data has failed.	System
1543		Operational
1543	The restore operation of the cluster configuration data has failed.	System
1544		Operational
1544	The backup operation for the cluster configuration data has been canceled.	System
1545		Operational
1545	The restore operation for the cluster configuration data has failed.	System
1546		Operational
1546	Node 'NodeName' failed to form a failover cluster.	System
1547		Operational
1547	Node 'NodeName' attempted to join a failover cluster but failed due to …	System
1548		Operational
1548	Node 'LocalNodeName' established communication with node 'RemoteNodeName' and …	System
1549	Node 'NodeName' successfully became part of a failover cluster and detected that …	Operational
1550		Operational
1550	Node 'LocalNodeName' established a communication session with node …	System
1551		Operational
1551	Node 'NodeName' formed a failover cluster without performing a version …	System
1552	The cluster service detected that the witness disk designation has changed - …	Operational
1553		Operational
1553	This cluster node has no network connectivity.	System
1554		Operational
1554	This cluster node has lost all network connectivity.	System
1555		Operational
1555	Attempting to use IPv4 for 'NetftDisplayName' network adapter failed.	System
1556		Operational
1556	The cluster service encountered an unexpected problem and will be shut down.	System
1557		Operational
1557	Cluster service failed to update the cluster configuration data on the witness …	System
1558		Operational
1558	The cluster service detected a problem with the witness resource.	System
1559		Operational
1559	File share 'ShareName' associated with the file share witness resource is …	System
1560		Operational
1560	Cluster file share resource 'ResourceName' has detected shared folder conflicts.	System
1561		Operational
1561	Cluster service failed to start because this node detected that it does not have …	System
1562		Operational
1562	File share witness resource 'ResourceName' failed a periodic health check on …	System
1563		Operational
1563	File share witness resource 'ResourceName' failed to come online.	System
1564		Operational
1564	File share witness resource 'ResourceName' failed to arbitrate for the file …	System
1565	This cluster node is running with a different message security level …	Operational
1566		Operational
1566	Cluster network name resource 'ResourceName' cannot be brought online.	System
1567		Operational
1567	Cluster service failed to change the trace log size.	System
1568		Operational
1568	Cluster disk resource 'ResourceName' found the disk identifier to be stale.	System
1569		Operational
1569	Network 'NetworkName' which has been disabled for failover cluster use, was …	System
1570		Operational
1570	Node 'NodeName' failed to establish a communication session while joining the …	System
1571		Operational
1571	Node 'NodeName' failed to establish a communication session while joining the …	System
1572		Operational
1572	Node 'NodeName' failed to join the cluster because it could not send and receive …	System
1573		Operational
1573	Node 'NodeName' failed to form a cluster.	System
1574		Operational
1574	The failover cluster database could not be unloaded.	System
1575		Operational
1575	An attempt to forcibly start the cluster service has failed because the cluster …	System
1576		Operational
1576	Cluster network name resource 'ResourceName' failed to register the name …	System
1577		Operational
1577	Cluster network name resource 'ResourceName' failed to register the name …	System
1578		Operational
1578	Cluster network name resource 'ResourceName' failed to register dynamic updates …	System
1579		Operational
1579	Cluster network name resource 'ResourceName' failed to update the DNS record for …	System
1580		Operational
1580	Cluster network name resource 'ResourceName' failed to register the name …	System
1581		Operational
1581	The restore request for the cluster configuration data failed to make a copy of …	System
1582		Operational
1582	Cluster Service failed to move the restored cluster hive at 'OriginalFileName' …	System
1583		Operational
1583	Cluster service failed to disable Internet Protocol security (IPsec) on the …	System
1584		Operational
1584	A backup application initiated a VSS snapshot on Cluster Shared Volume …	System
1585		Operational
1585	Cluster file server resource 'ResourceName' failed a health check.	System
1586		Operational
1586	Cluster file server resource 'ResourceName' failed a health check.	System
1587		Operational
1587	Cluster file server resource 'ResourceName' failed a health check.	System
1588		Operational
1588	Cluster file server resource 'ResourceName' cannot be brought online.	System
1589		Operational
1589	Cluster network name resource 'ResourceName' found one or more IP addresses …	System
1592		Operational
1592	Cluster node 'LocalNodeName' lost communication with cluster node …	System
1593		Operational
1593	The failover cluster database could not be unloaded and any potentially …	System
1594		Operational
1594	Cluster service successfully upgraded the cluster functional level.	System
1600		Operational
1600	Cluster service failed to set the permissions on the cluster computer object …	System
1601	The Cluster service successfully brought the Scale-out file server clone online.	Operational
1602	The Cluster service successfully brought the Scale-out file server clone …	Operational
1603		Operational
1603	Cluster service failed to create a clone of the Scale Out File Server resource.	System
1604		Operational
1604	Cluster disk resource 'ResourceName' detected corruption for volume 'VolumeID'.	System
1605		Operational
1605	Cluster disk resource 'ResourceName' completed running ChkDsk.	System
1606		Operational
1606	Cluster disk resource 'ResourceName' contains a BitLocker-protected volume, …	System
1607		Operational
1607	Cluster disk resource 'ResourceName' was unable to unlock the …	System
1608		Operational
1608	File Server could not start because expected dependency on 'Network Name' …	System
1609		Operational
1609	Scale Out File Server could not start because expected dependency on …	System
1632		Operational
1632	The creation of the cluster failed.	System
1633	The Cluster service failed to bring clustered role 'ResourceGroup' completely …	Operational
1634	Clustered service or application 'ResourceGroup' has exceeded its failover …	Operational
1635	Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.	Operational
1636	The Cluster service has changed the password of account 'AccountName' on node …	Operational
1637	Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned …	Operational
1638	Cluster resource 'ResourceName' in clustered role 'GroupName' has exceeded the …	Operational
1639	Cluster resource 'ResourceName' in clustered role 'GroupName' cannot come online …	Operational
1640	Clustered roles with priority less than 'BlockingPriority' are currently waiting …	Operational
1641	Clustered role 'GroupName' is moving to cluster node 'PreviousNodeName'.	Operational
1648	Clustered role 'GroupName' is currently waiting for the quorum witness resource …	Operational
1649	Cluster resource 'ResourceName' in clustered role 'GroupName' has taken more …	Operational
1650	Cluster has established a UDP connection from local endpoint LocalEndpoint …	Operational
1651	Cluster has received notification that Adapter AdapterName is now in a connected …	Operational
1652		Operational
1652	Cluster node 'NodeName' failed to join the cluster.	System
1653		Operational
1653	Cluster node 'NodeName' failed to join the cluster because it could not …	System
1654		Operational
1654	Cluster Disjoint IP address resource 'ResourceName' failed to come online.	System
1655		Operational
1655	Cluster Disjoint IP address resource 'ResourceName' failed to come online.	System
1656		Operational
1656	Failed to add the IP Address 'IPAddress' for Disjoint IP address resource …	System
1657		Operational
1657	Health check for IP interface 'ResourceName'(address 'IPAddress') failed (status …	System
1658		Operational
1658	Cloud witness resource could not reach Microsoft Azure storage services.	System
1659		Operational
1659	Cloud witness resource failed to authenticate with Microsoft Azure storage …	System
1664		Operational
1664	Upgrading the functional level of the cluster failed.	System
1665	Online operation for the Physical Disk resource 'ResourceName' is started.	Operational
1666	Online operation for the Physical Disk resource 'ResourceName' is completed with …	Operational
1667	Offline operation for the Physical Disk resource 'ResourceName' is started.	Operational
1668	Offline operation for the Physical Disk resource 'ResourceName' is completed …	Operational
1669	Cluster physical disk resource took longer than expected to reach an online …	Operational
1670	Cluster physical disk resource successfully brought the resource online.	Operational
1671		Operational
1671	Cluster physical disk resource cannot be brought online.	System
1672		Operational
1672	Cluster node 'NodeName' has been quarantined.	System
1673		Operational
1673	Cluster node 'ResourceName' has entered the isolated state.	System
1674	Group 'GroupName' has transitioned from state 'FromState' to state 'ToState'.	Operational
1675		Operational
1675	Cluster node 'NodeName' has been quarantined by 'QuarantineType' and cannot join …	System
1676		Operational
1676	Local cluster node has been quarantined by 'QuarantineType'.	System
1677		Operational
1677	Node drain failed on Cluster node NodeName.	System
1680		Operational
1680	Cluster node 'NodeName' has exited the isolated state.	System
1681		Operational
1681	Virtual machines on node 'NodeName' have entered an unmonitored state.	System
1682		Operational
1682	Virtual machine 'GroupList' which was unmonitored on the isolated node …	System
1683		Operational
1683	The cluster service was unable to reach any available domain controller on the …	System
1684		Operational
1684	Cluster network name resource failed to find the associated computer object in …	System
1685		Operational
1685	Cluster network name resource failed to find the associated computer object in …	System
1686		Operational
1686	Cluster network name resource found the associated computer object in Active …	System
1687		Operational
1687	Cluster network name resource found the associated computer object in Active …	System
1688		Operational
1688	Cluster network name resource detected that the associated computer object in …	System
1689		Operational
1689	The cluster service detected a service which is not compatible with Failover …	System
1690		Operational
1690	The cluster role was not brought online automatically because …	System
1691		Operational
1691	The cluster service started with the IgnorePersistentStateOnStartup parameter …	System
1792		Operational
1792	Cluster physical disk resource failed periodic health check.	System
1793		Operational
1793	Cluster physical disk resource failed to come online.	System
1794		Operational
1794	Cluster physical disk resource failed to go offline.	System
1795		Operational
1795	Cluster physical disk resource encountered an error while attempting to …	System
1808	The cluster load balancer has identified the current node is exceeding the CPU …	Operational
1809		Operational
1809	This node has been joined to a cluster that has Storage Spaces Direct enabled, …	System
1810	Cluster Physical Disk Resource added a protector to a BitLocker encrypted …	Operational
1811	Cluster Physical Disk Resource failed to add a protector to a BitLocker …	Operational
1812	Cluster Physical Disk Resource completed a storage operation.	Operational
1813	Cluster Physical Disk Resource completed resource online.	Operational
1814	Cluster Physical Disk Resource completed resource offline.	Operational
1815	Cluster Physical Disk Resource completed resource terminate.	Operational
1816	Cluster Physical Disk Resource could not find expected number of usable data …	Operational
1817	Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned …	Operational
1824	Cluster Physical Disk Resource contains a BitLocker protected volume, but the …	Operational
1825	Cluster Physical Disk Resource saved a protector to a BitLocker encrypted …	Operational
1826	Node drain failed on Cluster node NodeName.	Operational
1827	Node drain succeeded on Cluster node NodeName.	Operational
1828	Node drain started on Cluster node NodeName.	Operational
1829	Node drain started second attempt on Cluster node NodeName.	Operational
1830	Node failback failed on Cluster node NodeName.	Operational
1831	Node failback succeeded on Cluster node NodeName after being called from Origin.	Operational
1832	Node Resume started on Cluster node NodeName.	Operational
1833	Node failback started on Cluster node NodeName due to being called from Origin.	Operational
1840	Node Failback did not run on Cluster node NodeName after being called from …	Operational
1841	Node resume succeeded on Cluster node NodeName after being called from Origin.	Operational
2049		Diagnostic
2049		Operational
2050		Diagnostic
2050		Operational
2051		Diagnostic
2051		Operational
2052		Diagnostic
2052		Operational
4096	[NETFTAPI] received Notification for Address (State).	Diagnostic
4096		Operational
4097	[NETFTAPI] received Notification for Address (State).	Diagnostic
4097		Operational
4098	[NETFTAPI] received Notification for Address.	Diagnostic
4098		Operational
4099	[NETFTAPI] received Notification for Address.	Diagnostic
4099		Operational
4100	[NETFTAPI] received Notification.	Diagnostic
4100		Operational
4101	[NETFTAPI] Signaled Notification event for Address.	Diagnostic
4101		Operational
4102	[NETFTAPI] Signaled Notification event for Address.	Diagnostic
4102		Operational
4103	[NETFTAPI] Signaled Notification event, local address LocalAddress:LocalPort …	Diagnostic
4103		Operational
4104	[NETFTAPI] Signaled Notification event, local address [LocalAddress]:LocalPort …	Diagnostic
4104		Operational
4105	[NETFTAPI] Signaled Notification event, alias Alias.	Diagnostic
4105		Operational
4106	[NETFTAPI] Failed to allocate Address network address entry (status Status).	Diagnostic
4106		Operational
4107	[NETFTAPI] Failed to allocate Address network address entry (status Status).	Diagnostic
4107		Operational
4108	[NETFTAPI] Failed to query initialization parameters for Address (status …	Diagnostic
4108		Operational
4109	[NETFTAPI] Failed to query initialization parameters for Address (status …	Diagnostic
4109		Operational
4110	[NETFTAPI] Failed to query parameters for Address (status Status).	Diagnostic
4110		Operational
4111	[NETFTAPI] Failed to query parameters for Address (status Status).	Diagnostic
4111		Operational
4112	[NETFTAPI] Subscriber thrown exception Status processing NETFT notification.	Diagnostic
4112		Operational
4113	[NETFTAPI] Failed to allocate Interface network interface entry (status Status).	Diagnostic
4113		Operational
4114	[NETFTAPI] The IPv4/802 provider is not present	Diagnostic
4114		Operational
4115	[NETFTAPI] The IPv6/802 provider is not present	Diagnostic
4115		Operational
4116	[NETFTAPI] Event processing thread failed to register for NETFT event (status …	Diagnostic
4116		Operational
4117	[NETFTAPI] Event processing thread completed processing loop (status Status).	Diagnostic
4117		Operational
4118	[NETFTAPI] The watchdog miniport is halting.	Diagnostic
4118		Operational
4608	The list of clustered disks has been retrieved during cluster node cleanup.	Operational
4609		Operational
4609	Cluster service failed to retrieve the list of clustered disks while destroying …	System
4610	Clustered disks have been released by the Partition Manager while destroying the …	Operational
4611		Operational
4611	Clustered disk with ID 'DiskId' was not released by the Partition Manager while …	System
4612	The clustered disks database has been cleared as part of cluster node cleanup.	Operational
4613		Operational
4613	The cluster service failed to properly cleanup a clustered disk with ID 'DiskId' …	System
4614	The cluster service has been stopped and set as disabled as part of cluster node …	Operational
4615		Operational
4615	Disabling the cluster service during cluster node cleanup, has failed.	System
4616		Operational
4616	Termination of the cluster service during cluster node cleanup has not completed …	System
4617	The cluster service registry entries on this machine have been reset as part of …	Operational
4618		Operational
4618	Resetting cluster service registry entries during cluster node cleanup failed.	System
4619	The cluster Windows registry hive has been unloaded.	Operational
4620		Operational
4620	Unloading the cluster service registry hive during cluster node cleanup failed.	System
4621		Operational
4621	This node was sucessfully removed from the cluster.	System
4622		Operational
4622	The Cluster service encountered an error during node cleanup.	System
4623	The IPSec security association timeout has been reset on this machine as part of …	Operational
4624		Operational
4624	Resetting the IPSec security association timeout registry value failed during …	System
4625		Operational
4625	Resetting the IPSec security association timeout registry value failed during …	System
4626	All clustered tasks on this node have been deleted as part of node cleanup.	Operational
4627		Operational
4627	Deletion of clustered tasks during node cleanup failed.	System
4628	During node cleanup, the local user account that is managed by the cluster was …	Operational
4629		Operational
4629	During node cleanup, the local user account that is managed by the cluster was …	System
4864		Operational
4864	Volume shadow copy service task resource 'ResourceName' creation failed.	System
4865		Operational
4865	Volume shadow copy service task resource 'ResourceName' failed.	System
4866		Operational
4866	Volume shadow copy service task resource 'ResourceName' failed.	System
4867		Operational
4867	Volume shadow copy service task resource 'ResourceName' failed.	System
4868		Operational
4868	Cluster service failed to start the cluster log trace session.	System
4869		Operational
4869	User mode health monitoring has detected that the system is not being …	System
4870		Operational
4870	User mode health monitoring has detected that the system is not being …	System
4871		Operational
4871	The cluster service failed to start.	System
4872		Operational
4872	The failover cluster virtual adapter failed to generate a unique MAC address.	System
4873		Operational
4873	The cluster service has detected that the failover cluster virtual adapter has …	System
4874		Operational
4874	User mode health monitoring has detected that the system is not being …	System
5120		Operational
5120	Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state …	System
5121		Operational
5121	Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer directly …	System
5122	Cluster Shared Volume 'VolumeName' ('ResourceName') has now resumed normal …	Operational
5123		Operational
5123	Cluster service failed to create the Cluster Shared Volumes root directory …	System
5124		Operational
5124	Cluster Shared Volumes root directory 'RootName' already exists.	System
5125		Operational
5125	Cluster Shared Volume 'VolumeName' ('ResourceName') has identified one or more …	System
5126		Operational
5126	Cluster Shared Volume 'VolumeName' ('ResourceName') has identified one or more …	System
5128		Operational
5128	Physical disk resource 'ResourceName' does not allow disabling short name …	System
5129	Cluster Shared Volumes has been enabled on this cluster by user 'UserName'.	Operational
5130	Cluster Shared Volumes has been disabled on this cluster by user 'UserName'.	Operational
5131	Cluster Disk 'ResourceName' has been added to Cluster Shared Volumes.	Operational
5132	Cluster Disk 'ResourceName' has been removed from Cluster Shared Volumes.	Operational
5133		Operational
5133	Cluster Disk 'ResourceName' has been removed and placed back in the 'Available …	System
5134		Operational
5134	Cluster service failed to set the permissions (ACL) on the Cluster Shared …	System
5135		Operational
5135	Cluster service failed to set the permissions on the Cluster Shared Volume …	System
5136		Operational
5136	Cluster Shared Volume 'VolumeName' ('ResourceName') redirected access was turned …	System
5137	Cluster Shared Volume 'VolumeName' ('ResourceName') redirected access was turned …	Operational
5138	Cluster Shared Volume 'VolumeName' ('ResourceName') maintenance was turned on.	Operational
5139	Cluster Shared Volume 'VolumeName' ('ResourceName') maintenance was turned off.	Operational
5140	Cluster Shared Volume 'VolumeName' ('ResourceName') backup was turned on.	Operational
5141	Cluster Shared Volume 'VolumeName' ('ResourceName') backup was turned off.	Operational
5142		Operational
5142	Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer accessible from …	System
5143		Operational
5143	Move of the disk ('ResourceName') is vetoed based on the current state of the …	System
5144		Operational
5144	While adding the disk ('ResourceName') to Cluster Shared Volumes, setting …	System
5145		Operational
5145	Cluster disk resource 'ResourceName' failed to delete a software snapshot.	System
5146		Operational
5146	Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because one …	System
5147		Operational
5147	Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because a …	System
5148		Operational
5148	Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because an …	System
5149		Operational
5149	Cache size resized to 'CacheSizeInMb' based on populated memory, user setsize is …	System
5150		Operational
5150	Cluster physical disk resource 'ResourceName' failed.	System
5151	Cluster Shared Volume 'VolumeName' (resource 'ResourceName') transitioned to …	Operational
5152	Cluster Shared Volume 'VolumeName' (resource 'ResourceName') was unable to …	Operational
5153	Cluster Shared Volume 'VolumeName' (resource 'ResourceName') received event …	Operational
5154	Cluster Shared Volume 'VolumeName' (resource 'ResourceName') completed …	Operational
5155	Cluster Shared Volume resource 'ResourceName' completed processing request …	Operational
5156		Operational
5156	Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state …	System
5157		Operational
5157	Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state …	System
5158	SMB client connection to server 'ServerName' (node 'Node') on instance …	Operational
5159	SMB client connection from source address 'SourceAddress' to destination address …	Operational
5160	SMB client disconnect state for connection to server 'ServerName' (node 'Node') …	Operational
5161	The volume name 'VolumeName' was removed because the underlying disk partition …	Operational
5162		Operational
5162	Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because …	System
5163	Cluster service disabled RDMA on the SMB instance for SMBInstanceName IO on this …	Operational
5164	Cluster service enabled RDMA on the SMB instance for SMBInstanceName IO on this …	Operational
5200		Operational
5200	Cluster service failed to create a cluster identity token for Cluster Shared …	System
5216		Operational
5216	Software snapshot creation on Cluster Shared Volume 'VolumeName' …	System
5217		Operational
5217	Software snapshot creation on Cluster Shared Volume(s) ('VolumeNames') with …	System
5218		Operational
5218	Cluster physical disk resource 'ResourceName' deleted a software snapshot.	System
5219		Operational
5219	Cluster service failed to register the Cluster Shared Volumes snapshot provider …	System
5220		Operational
5220	Cluster Service detected the fault domain settings may not be configured …	System
5235	Task 'TaskName' is successfully registered.	Operational
5237	Task 'TaskName' is successfully changed.	Operational
5245	Task 'TaskName' is successfully deleted.	Operational
5264	Physical Disk resource 'DeviceName' has been disconnected from this node.	Operational
5265	Cluster network 'NetworkName' is down because the network interfaces connected …	Operational
5266	Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network …	Operational
5267	ClusterMrr API request timed out because some nodes did not reply to the request …	Operational
5268	Too many ClusterMrr API requests are outstanding on this node.	Operational
5269	ClusterMrr API request handler timed out on this node.	Operational
5377		Operational
5377	An internal Cluster service operation exceeded the defined threshold of …	System
5393	The Cluster detected that this node is slower than others and degrade Cluster …	Operational
5394		Operational
5394	The Cluster service encountered some storage errors while trying to bring …	System
5395		Operational
5395	Cluster is moving the group for storage pool 'ResourceName' because current node …	System
5396		Operational
5396	The Cluster service on this node is shutting down because it has detected that …	System
5397		Operational
5397	The cluster resource 'ResourceName' could not create or modify the replicated …	System
5398		Operational
5398	Cluster failed to start.	System
5399		DiagnosticVerbose
5399		Operational
5400		DiagnosticVerbose
5400		Operational
5401		DiagnosticVerbose
5401		Operational
5408		DiagnosticVerbose
5408		Operational
5409		ClusterSetDiagnostic
5409		Operational
5410		ClusterSetDiagnostic
5410		Operational
5411		ClusterSetDiagnostic
5411		Operational
5412		ClusterSetDiagnostic
5412		Operational
5413		Operational
5413	The cluster has cold started.	System
5414		Operational
5414	Failed to create the clustered role "ResourceName" because Azure Stack HCI is …	System
5415	Group is about to move to new owner.	Operational
5416	Property change has occured.	Operational
5417	Cluster Service has terminated due to a fatal error.	Operational
5424		Operational
5424	Clusapi handle of type HandleType has been marked as dead.	System
43968		Operational
43968	Volume VolumeId activating.	Performance-CSV
43969		Operational
43969	Volume VolumeId deactivating.	Performance-CSV
43970		Operational
43970	IO IoId is of type IrpMajorFunction.	Performance-CSV
43971		Operational
43971	IO IoId now in state State.	Performance-CSV
43972		Operational
43972	fsContext FileId opened for file Name.	Performance-CSV
43973		Operational
43973	fsContext FileId closed.	Performance-CSV
43974		Operational
43974	fsContext FileId is in state State.	Performance-CSV

Event ID 1000 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

Cluster service suffered an unexpected fatal error at line of source module . The error code was .

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—

Event ID 1000 — Cluster service suffered an unexpected fatal error at line Parameter1 of source module Parameter2.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

Cluster service suffered an unexpected fatal error at line Parameter1 of source module Parameter2. The error code was Parameter3.

Message #

Cluster service suffered an unexpected fatal error at line %1 of source module %2. The error code was %3.

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—

Event ID 1001 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

Cluster service failed a validity check on line Parameter1 of source module Parameter2. "Parameter3".

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1001 — Cluster service failed a validity check on line Parameter1 of source module Parameter2.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

Cluster service failed a validity check on line Parameter1 of source module Parameter2. "Parameter3".

Message #

Cluster service failed a validity check on line %1 of source module %2. "%3"

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1002 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

Cluster service handled an unexpected error at line of source module . The error code was .

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1002 — Cluster service handled an unexpected error at line Parameter1 of source module Parameter2.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

Cluster service handled an unexpected error at line Parameter1 of source module Parameter2. The error code was Parameter3.

Message #

Cluster service handled an unexpected error at line %1 of source module %2. The error code was %3.

Fields #

Name	Description
`Parameter1` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1006 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Cluster service was halted due to incomplete connectivity with other cluster nodes.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1006 — Cluster service was halted due to incomplete connectivity with other cluster nodes.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Cluster service was halted due to incomplete connectivity with other cluster nodes.

Message #

Cluster service was halted due to incomplete connectivity with other cluster nodes.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1007 — A new node, NodeName, has been added to the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

A new node, NodeName, has been added to the failover cluster.

Message #

A new node, %1, has been added to the failover cluster.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1011 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Cluster node has been evicted from the failover cluster.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1011 — Cluster node NodeName has been evicted from the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Cluster node NodeName has been evicted from the failover cluster.

Message #

Cluster node %1 has been evicted from the failover cluster.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1024 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: CheckpointMgr

Fields #

Name	Description
`ResourceName` UnicodeString	—
`RegistryPath` UnicodeString	—

Event ID 1024 — The registry checkpoint for cluster resource 'ResourceName' could not be restored to registry key HKEY_LOCAL_MACHINE\RegistryPath.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: CheckpointMgr

Message #

The registry checkpoint for cluster resource '%1' could not be restored to registry key HKEY_LOCAL_MACHINE\%2. The resource may not function correctly. Make sure that no other processes have open handles to registry keys in this registry subtree.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`RegistryPath` UnicodeString	—

Event ID 1034 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DiskSignature` UnicodeString	—

Event ID 1034 — Cluster physical disk resource 'ResourceName' cannot be brought online because the associated disk could not be found.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

Cluster physical disk resource '%1' cannot be brought online because the associated disk could not be found. The expected signature of the disk was '%2'. If the disk was replaced or restored, in the Failover Cluster Manager snap-in, you can use the Repair function (in the properties sheet for the disk) to repair the new or restored disk. If the disk will not be replaced, delete the associated disk resource.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DiskSignature` UnicodeString	—

Event ID 1035 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1035 — While disk resource 'ResourceName' was being brought online, access to one or more volumes failed with error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

While disk resource '%1' was being brought online, access to one or more volumes failed with error '%2'. Run the Validate a Configuration wizard to check your storage configuration. Optionally you may want to run Chkdsk to verify the integrity of all volumes on this disk.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1037 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1037 — The file system for one or more partitions on the disk for resource 'ResourceName' may be corrupt.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

The file system for one or more partitions on the disk for resource '%1' may be corrupt. Run the Validate a Configuration wizard to check your storage configuration. Optionally, you may want to run Chkdsk to verify the integrity of all volumes on this disk.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1038 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Ownership of cluster disk 'ResourceName' has been unexpectedly lost by this node. Run the Validate a Configuration wizard to check your storage configuration.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1038 — Ownership of cluster disk 'ResourceName' has been unexpectedly lost by this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Ownership of cluster disk 'ResourceName' has been unexpectedly lost by this node. Run the Validate a Configuration wizard to check your storage configuration.

Message #

Ownership of cluster disk '%1' has been unexpectedly lost by this node. Run the Validate a Configuration wizard to check your storage configuration.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1039 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericAppResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1039 — Generic application 'ResourceName' could not be brought online (with error 'Status') during an attempt to create the process.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericAppResource

Message #

Generic application '%1' could not be brought online (with error '%2') during an attempt to create the process.  Possible causes include: the application may not be present on this node, the path name may have been specified incorrectly, the binary name may have been specified incorrectly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1040 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericServiceResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1040 — Generic service 'ResourceName' could not be brought online (with error 'Status') during an attempt to open the service.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericServiceResource

Message #

Generic service '%1' could not be brought online (with error '%2') during an attempt to open the service.  Possible causes include: the service is either not installed or the specified service name is invalid.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1041 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericServiceResource

Description

Generic service 'ResourceName' could not be brought online (with error 'Status') during an attempt to start the service. Possible cause: the specified service parameters might be invalid.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1041 — Generic service 'ResourceName' could not be brought online (with error 'Status') during an attempt to start the service.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericServiceResource

Description

Generic service 'ResourceName' could not be brought online (with error 'Status') during an attempt to start the service. Possible cause: the specified service parameters might be invalid.

Message #

Generic service '%1' could not be brought online (with error '%2') during an attempt to start the service.  Possible cause: the specified service parameters might be invalid.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1042 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericServiceResource

Description

Generic service 'ResourceName' failed with error 'Status'. Please examine the application event log.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1042 — Generic service 'ResourceName' failed with error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericServiceResource

Description

Generic service 'ResourceName' failed with error 'Status'. Please examine the application event log.

Message #

Generic service '%1' failed with error '%2'. Please examine the application event log.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1044 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Encountered a failure when attempting to create a new NetBIOS interface while bringing resource 'ResourceName' online (error code 'Status'). The maximum number of NetBIOS names may have been exceeded.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1044 — Encountered a failure when attempting to create a new NetBIOS interface while bringing resource 'ResourceName' online (error code 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Message #

Encountered a failure when attempting to create a new NetBIOS interface while bringing resource '%1' online (error code '%2'). The maximum number of NetBIOS names may have been exceeded.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1045 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

No matching network interface found for resource 'ResourceName' IP address 'IPAddress' (return code was 'Status'). If your cluster nodes span different subnets, this may be normal.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1045 — No matching network interface found for resource 'ResourceName' IP address 'IPAddress' (return code was 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

No matching network interface found for resource 'ResourceName' IP address 'IPAddress' (return code was 'Status'). If your cluster nodes span different subnets, this may be normal.

Message #

No matching network interface found for resource '%1' IP address '%2' (return code was '%3').  If your cluster nodes span different subnets, this may be normal.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1046 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because the subnet mask value is invalid. Please check your IP address resource properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1046 — Cluster IP address resource 'ResourceName' cannot be brought online because the subnet mask value is invalid.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because the subnet mask value is invalid. Please check your IP address resource properties.

Message #

Cluster IP address resource '%1' cannot be brought online because the subnet mask value is invalid.  Please check your IP address resource properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1047 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because the address value is invalid. Please check your IP address resource properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1047 — Cluster IP address resource 'ResourceName' cannot be brought online because the address value is invalid.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because the address value is invalid. Please check your IP address resource properties.

Message #

Cluster IP address resource '%1' cannot be brought online because the address value is invalid.  Please check your IP address resource properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1048 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetInterfaceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1048 — Cluster IP address resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Message #

Cluster IP address resource '%1' failed to come online. Configuration data for the network adapter corresponding to cluster network interface '%2' could not be determined (error code was '%3'). Please check that the IP address resource is configured with the correct address and network properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetInterfaceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1049 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because a duplicate IP address 'Parameter2' was detected on the network. Please ensure all IP addresses are unique.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1049 — Cluster IP address resource 'ResourceName' cannot be brought online because a duplicate IP address 'Parameter2' was detected on the network.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because a duplicate IP address 'Parameter2' was detected on the network. Please ensure all IP addresses are unique.

Message #

Cluster IP address resource '%1' cannot be brought online because a duplicate IP address '%2' was detected on the network.  Please ensure all IP addresses are unique.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1050 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' cannot be brought online because name 'Name' matches this cluster node name. Ensure that network names are unique.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—

Event ID 1050 — Cluster network name resource 'ResourceName' cannot be brought online because name 'Name' matches this cluster node name.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' cannot be brought online because name 'Name' matches this cluster node name. Ensure that network names are unique.

Message #

Cluster network name resource '%1' cannot be brought online because name '%2' matches this cluster node name.  Ensure that network names are unique.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—

Event ID 1051 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1051 — Cluster network name resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' cannot be brought online. Ensure that the network adapters for dependent IP address resources have access to at least one DNS server. Alternatively, enable NetBIOS for dependent IP addresses.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1052 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster Network Name resource 'ResourceName' cannot be brought online because the name could not be added to the system. The associated error code is stored in the data section.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1052 — Cluster Network Name resource 'ResourceName' cannot be brought online because the name could not be added to the system.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster Network Name resource 'ResourceName' cannot be brought online because the name could not be added to the system. The associated error code is stored in the data section.

Message #

Cluster Network Name resource '%1' cannot be brought online because the name could not be added to the system. The associated error code is stored in the data section.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1053 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Description

Cluster File Share 'ResourceName' cannot be brought online because the share could not be created.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1053 — Cluster File Share 'ResourceName' cannot be brought online because the share could not be created.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Description

Cluster File Share 'ResourceName' cannot be brought online because the share could not be created.

Message #

Cluster File Share '%1' cannot be brought online because the share could not be created.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1054 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Description

Health check for file share resource 'ResourceName' failed. Retrieving information for share 'ShareName' (scoped to network name ShareScopeName) returned error code 'Status'. Ensure the share exists and is accessible.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1054 — Health check for file share resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Description

Message #

Health check for file share resource '%1' failed.  Retrieving information for share '%2' (scoped to network name %3) returned error code '%4'.  Ensure the share exists and is accessible.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1055 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1055 — Health check for file share resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Message #

Health check for file share resource '%1' failed.  Retrieving information for share '%2' (scoped to network name %3) indicated that the share does not exist (error code '%4').  Please ensure the share exists and is accessible.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1057 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Description

The cluster database could not be loaded. The file may be missing or corrupt. Automatic repair might be attempted.

Event ID 1057 — The cluster database could not be loaded.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Description

The cluster database could not be loaded. The file may be missing or corrupt. Automatic repair might be attempted.

Message #

The cluster database could not be loaded. The file may be missing or corrupt. Automatic repair might be attempted.

Event ID 1061 — The Cluster service successfully formed the failover cluster 'ClusterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

The Cluster service successfully formed the failover cluster 'ClusterName'.

Message #

The Cluster service successfully formed the failover cluster '%1'.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1062 — This node has successfully joined the failover cluster 'ClusterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

This node has successfully joined the failover cluster 'ClusterName'.

Message #

This node has successfully joined the failover cluster '%1'.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1063 — The Cluster service was successfully stopped.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

The Cluster service was successfully stopped.

Message #

The Cluster service was successfully stopped.

Event ID 1066 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' indicates corruption for volume 'VolumeID'. Chkdsk is being run to repair problems. The disk will be unavailable until Chkdsk completes. Chkdsk output will be logged to file 'ChkdskLogFile'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`ChkdskLogFile` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1066 — Cluster disk resource 'ResourceName' indicates corruption for volume 'VolumeID'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Message #

Cluster disk resource '%1' indicates corruption for volume '%2'. Chkdsk is being run to repair problems. The disk will be unavailable until Chkdsk completes. Chkdsk output will be logged to file '%3'.
 Chkdsk may also write information to the Application Event Log.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`ChkdskLogFile` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1068 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Description

Cluster file share resource 'ResourceName' cannot be brought online. Creation of file share 'ShareName' (scoped to network name ShareScopeName) failed due to error 'Status'. This operation will be automatically retried.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1068 — Cluster file share resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Description

Message #

Cluster file share resource '%1' cannot be brought online.  Creation of file share '%2' (scoped to network name %3) failed due to error '%4'.  This operation will be automatically retried.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1069 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—
`ResTypeDll` UnicodeString	—

Event ID 1069 — Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.

Message #

Cluster resource '%1' in clustered role '%2' failed.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—
`ResTypeDll` UnicodeString	—

Event ID 1070 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

The node failed to join failover cluster 'ClusterName' due to error code 'Status'.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1070 — The node failed to join failover cluster 'ClusterName' due to error code 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Description

The node failed to join failover cluster 'ClusterName' due to error code 'Status'.

Message #

The node failed to join failover cluster '%1' due to error code '%2'.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1071 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The operation attempted on cluster resource 'ResourceName' of type 'ResTypeDll' in clustered role 'ResourceGroup' could not be completed because the resource or one of its providers has locked status.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—
`ResTypeDll` UnicodeString	—

Event ID 1071 — The operation attempted on cluster resource 'ResourceName' of type 'ResTypeDll' in clustered role 'ResourceGroup' could not be completed because the resource or one of its prov...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Message #

The operation attempted on cluster resource '%1' of type '%3' in clustered role '%2' could not be completed because the resource or one of its providers has locked status.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—
`ResTypeDll` UnicodeString	—

Event ID 1073 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

The Cluster service was halted to prevent an inconsistency within the failover cluster. The error code was 'Status'.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1073 — The Cluster service was halted to prevent an inconsistency within the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

The Cluster service was halted to prevent an inconsistency within the failover cluster. The error code was 'Status'.

Message #

The Cluster service was halted to prevent an inconsistency within the failover cluster. The error code was '%1'.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1077 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Health check for IP interface 'ResourceName' (address 'IPAddress') failed (status is 'Status'). Run the Validate a Configuration wizard to ensure that the network adapter is functioning properly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1077 — Health check for IP interface 'ResourceName' (address 'IPAddress') failed (status is 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Health check for IP interface 'ResourceName' (address 'IPAddress') failed (status is 'Status'). Run the Validate a Configuration wizard to ensure that the network adapter is functioning properly.

Message #

Health check for IP interface '%1' (address '%2') failed (status is '%3'). Run the Validate a Configuration wizard to ensure that the network adapter is functioning properly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1078 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' cannot be brought online because WINS registration failed on interface 'InterfaceName' with error 'Status'. Ensure that a valid, accessible WINS server has been specified.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`InterfaceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1078 — Cluster IP address resource 'ResourceName' cannot be brought online because WINS registration failed on interface 'InterfaceName' with error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Message #

Cluster IP address resource '%1' cannot be brought online because WINS registration failed on interface '%2' with error '%3'. Ensure that a valid, accessible WINS server has been specified.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`InterfaceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1080 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Description

The Cluster service failed to update the cluster database (error code 'Status'). Possible causes are insufficient disk space or file system corruption.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1080 — The Cluster service failed to update the cluster database (error code 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Description

The Cluster service failed to update the cluster database (error code 'Status'). Possible causes are insufficient disk space or file system corruption.

Message #

The Cluster service failed to update the cluster database (error code '%1'). Possible causes are insufficient disk space or file system corruption.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1090 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1090 — The Cluster service cannot be started.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

The Cluster service cannot be started. An attempt to read configuration data from the Windows registry failed with error '%1'. Please use the Failover Cluster Management snap-in to ensure that this machine is a member of a cluster. If you intend to add this machine to an existing cluster use the Add Node Wizard. Alternatively, if this machine has been configured as a member of a cluster, it will be necessary to restore the missing configuration data that is necessary for the Cluster Service to identify that it is a member of a cluster. Perform a System State Restore of this machine in order to restore the configuration data.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1092 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

Failed to form cluster 'ClusterName' with error code 'Status'. Failover cluster will not be available.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1092 — Failed to form cluster 'ClusterName' with error code 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Description

Failed to form cluster 'ClusterName' with error code 'Status'. Failover cluster will not be available.

Message #

Failed to form cluster '%1' with error code '%2'. Failover cluster will not be available.

Fields #

Name	Description
`ClusterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1093 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`NodeName` UnicodeString	—
`ClusterName` UnicodeString	—

Event ID 1093 — The Cluster service cannot identify node 'NodeName' as a member of failover cluster 'ClusterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

The Cluster service cannot identify node '%1' as a member of failover cluster '%2'. If the computer name for this node was recently changed, consider reverting to the previous name. Alternatively, add the node to the failover cluster and if necessary, reinstall clustered applications.

Fields #

Name	Description
`NodeName` UnicodeString	—
`ClusterName` UnicodeString	—

Event ID 1094 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Description

The cluster common property SecurityLevel cannot be changed on this cluster. The cluster security level cannot be changed because the cluster is currently configured for no authentication mode.

Event ID 1094 — The cluster common property SecurityLevel cannot be changed on this cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: SecurityManager

Description

The cluster common property SecurityLevel cannot be changed on this cluster. The cluster security level cannot be changed because the cluster is currently configured for no authentication mode.

Message #

The cluster common property SecurityLevel cannot be changed on this cluster. The cluster security level cannot be changed because the cluster is currently configured for no authentication mode.

Event ID 1105 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: API

Description

The Cluster service failed to start because it was unable to register interface(s) with the RPC service. The error code was 'Status'.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1105 — The Cluster service failed to start because it was unable to register interface(s) with the RPC service.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: API

Description

The Cluster service failed to start because it was unable to register interface(s) with the RPC service. The error code was 'Status'.

Message #

The Cluster service failed to start because it was unable to register interface(s) with the RPC service.  The error code was '%1'.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`NodeName` UnicodeString	—

Event ID 1116 — Cluster network name resource 'ResourceName' failed to renew its DNS registration.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to renew its DNS registration. Ensure that the network adapters for dependent IP address resources have access to at least one DNS server. Alternatively, enable NetBIOS for dependent IP addresses. It is possible that the DNS server may be temporarily unavailable - the DNS registration attempt will be retried.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1119 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to register DNS name 'Name' over adapter 'AdapterName' for the following reason.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1119 — Cluster network name resource 'ResourceName' failed to register DNS name 'Name' over adapter 'AdapterName' for the following reason.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to register DNS name 'Name' over adapter 'AdapterName' for the following reason.

Message #

Cluster network name resource '%1' failed to register DNS name '%2' over adapter '%4' for the following reason: 

'%3'

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1121 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: CheckpointMgr

Description

Encrypted settings for cluster resource 'ResourceName' could not be successfully applied to the container name 'ContainerName' on this node.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ContainerName` UnicodeString	—

Event ID 1121 — Encrypted settings for cluster resource 'ResourceName' could not be successfully applied to the container name 'ContainerName' on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: CheckpointMgr

Description

Encrypted settings for cluster resource 'ResourceName' could not be successfully applied to the container name 'ContainerName' on this node.

Message #

Encrypted settings for cluster resource '%1' could not be successfully applied to the container name '%2' on this node.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ContainerName` UnicodeString	—

Event ID 1125 — Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network 'NetworkName' is operational (up).

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network 'NetworkName' is operational (up). The node can communicate with all other available failover cluster nodes on the network.

Message #

Cluster network interface '%1' for cluster node '%2' on network '%3' is operational (up). The node can communicate with all other available failover cluster nodes on the network.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1126 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1126 — Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network 'NetworkName' is unreachable by at least one other cluster node attached to the network.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkManager

Message #

Cluster network interface '%1' for cluster node '%2' on network '%3' is unreachable by at least one other cluster node attached to the network. The failover cluster was not able to determine the location of the failure. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1127 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1127 — Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network 'NetworkName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkManager

Message #

Cluster network interface '%1' for cluster node '%2' on network '%3' failed. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1128 — Cluster network 'NetworkName' is operational (up).

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network 'NetworkName' is operational (up). All available failover cluster nodes attached to the network can communicate using it.

Message #

Cluster network '%1' is operational (up). All available failover cluster nodes attached to the network can communicate using it.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1129 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1129 — Cluster network 'NetworkName' is partitioned.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkManager

Message #

Cluster network '%1' is partitioned. Some attached failover cluster nodes cannot communicate with each other over the network. The failover cluster was not able to determine the location of the failure. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1130 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1130 — Cluster network 'NetworkName' is down.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkManager

Message #

Cluster network '%1' is down. None of the available nodes can communicate using this network. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1131 — Cluster network interface 'InterfaceName' was added for node 'NodeName' on network 'NetworkName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network interface 'InterfaceName' was added for node 'NodeName' on network 'NetworkName'.

Message #

Cluster network interface '%1' was added for node '%2' on network '%3'.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1132 — Cluster network interface 'InterfaceName' for node 'NodeName' on network 'NetworkName' was removed.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network interface 'InterfaceName' for node 'NodeName' on network 'NetworkName' was removed.

Message #

Cluster network interface '%1' for node '%2' on network '%3' was removed.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1133 — Cluster network 'NetworkName' was added to the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network 'NetworkName' was added to the failover cluster.

Message #

Cluster network '%1' was added to the failover cluster.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1134 — Cluster network 'NetworkName' was removed from the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Description

Cluster network 'NetworkName' was removed from the failover cluster.

Message #

Cluster network '%1' was removed from the failover cluster.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 1135 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1135 — Cluster node 'NodeName' was removed from the active failover cluster membership.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Cluster node '%1' was removed from the active failover cluster membership. The Cluster service on this node may have stopped. This could also be due to the node having lost communication with other active nodes in the failover cluster. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapters on this node. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1136 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event is about to occur. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1136 — The cluster service has detected an Azure host maintenance event is about to occur.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event is about to occur. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Message #

The cluster service has detected an Azure host maintenance event is about to occur.  This maintenance event may cause the virtual machine hosting this node to become unavailable during this time. 

 Node: %1 
 Approximate Time: %2 
 Details: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1137 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Move of cluster role 'ResourceGroup' for drain could not be completed. The operation failed with error code ApplicationErrorCode.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`ApplicationErrorCode` UnicodeString	—

Event ID 1137 — Move of cluster role 'ResourceGroup' for drain could not be completed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Move of cluster role 'ResourceGroup' for drain could not be completed. The operation failed with error code ApplicationErrorCode.

Message #

Move of cluster role '%1' for drain could not be completed.  The operation failed with error code %2.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`ApplicationErrorCode` UnicodeString	—

Event ID 1138 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1138 — Cluster file share resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Message #

Cluster file share resource '%1' cannot be brought online. Creation of DFS namespace root failed with error '%3'. This may be due to failure to start the 'DFS Namespace' service or failure to create the DFS-N root for share '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1139 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event has been scheduled. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1139 — The cluster service has detected an Azure host maintenance event has been scheduled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event has been scheduled. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Message #

The cluster service has detected an Azure host maintenance event has been scheduled.  This maintenance event may cause the virtual machine hosting this node to become unavailable during this time. 

 Node: %1 
 Approximate Time: %2 
 Details: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1140 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event has been rescheduled. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1140 — The cluster service has detected an Azure host maintenance event has been rescheduled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

The cluster service has detected an Azure host maintenance event has been rescheduled. This maintenance event may cause the virtual machine hosting this node to become unavailable during this time.

Message #

The cluster service has detected an Azure host maintenance event has been rescheduled.  This maintenance event may cause the virtual machine hosting this node to become unavailable during this time. 

 Node: %1 
 Original Time: %2 
 New Time: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`MaintenanceTime` UnicodeString	—
`Metadata` UnicodeString	—

Event ID 1141 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Description

Cluster file share resource 'ResourceName' cannot be brought online. Resynchronization of DFS root target 'ShareName' failed with error 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1141 — Cluster file share resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Description

Cluster file share resource 'ResourceName' cannot be brought online. Resynchronization of DFS root target 'ShareName' failed with error 'Status'.

Message #

Cluster file share resource '%1' cannot be brought online. Resynchronization of DFS root target '%2' failed with error '%3'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1142 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Description

Cluster file share resource 'ResourceName' for DFS Namespace cannot be brought online due to error 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1142 — Cluster file share resource 'ResourceName' for DFS Namespace cannot be brought online due to error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Description

Cluster file share resource 'ResourceName' for DFS Namespace cannot be brought online due to error 'Status'.

Message #

Cluster file share resource '%1' for DFS Namespace cannot be brought online due to error '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1146 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1146 — The cluster Resource Hosting Subsystem (RHS) process was terminated and will be restarted.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

The cluster Resource Hosting Subsystem (RHS) process was terminated and will be restarted. This is typically associated with cluster health detection and recovery of a resource. Refer to the System event log to determine which resource and resource DLL is causing the issue.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1149 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1149 — The DNS Host (A) and Pointer (PTR) records associated with Cluster resource 'ResourceName' were not removed from the resource's associated DNS server.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

The DNS Host (A) and Pointer (PTR) records associated with Cluster resource '%1' were not removed from the resource's associated DNS server. If necessary, they can be deleted manually. Contact your DNS administrator to assist with this effort.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1150 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`PTRRecord` UnicodeString	—
`HostName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1150 — The removal of the DNS Pointer (PTR) record 'PTRRecord' for host 'HostName' which is associated with the cluster network name resource 'ResourceName' failed with error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

The removal of the DNS Pointer (PTR) record '%2' for host '%3' which is associated with the cluster network name resource '%1' failed with error '%4'. If necessary, the record can be deleted manually. Contact your DNS administrator for assistance.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`PTRRecord` UnicodeString	—
`HostName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1151 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ARecord` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1151 — The removal of the DNS Host (A) record 'ARecord' associated with the cluster network name resource 'ResourceName' failed with error 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

The removal of the DNS Host (A) record '%2' associated with the cluster network name resource '%1' failed with error '%3'. If necessary, the record can be deleted manually. Contact your DNS administrator for assistance.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ARecord` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1153 — The Cluster service is attempting to fail over the clustered role 'ResourceGroup' from node 'FromNode' to node 'ToNode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service is attempting to fail over the clustered role 'ResourceGroup' from node 'FromNode' to node 'ToNode'.

Message #

The Cluster service is attempting to fail over the clustered role '%1' from node '%2' to node '%3'.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`FromNode` UnicodeString	—
`ToNode` UnicodeString	—

Event ID 1154 — The Cluster service is attempting to fail back the clustered role 'ResourceGroup' from node 'FromNode' to node 'ToNode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service is attempting to fail back the clustered role 'ResourceGroup' from node 'FromNode' to node 'ToNode'.

Message #

The Cluster service is attempting to fail back the clustered role '%1' from node '%2' to node '%3'.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`FromNode` UnicodeString	—
`ToNode` UnicodeString	—

Event ID 1155 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The pending move for the role 'ResourceGroup' did not complete.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`ApplicationErrorCode` UInt32	—

Event ID 1155 — The pending move for the role 'ResourceGroup' did not complete.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

The pending move for the role 'ResourceGroup' did not complete.

Message #

The pending move for the role '%1' did not complete.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—
`ApplicationErrorCode` UInt32	—

Event ID 1156 — Cluster resource 'ResourceName' was added to the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' was added to the failover cluster.

Message #

Cluster resource '%1' was added to the failover cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1157 — Cluster resource 'ResourceName' was removed from the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' was removed from the failover cluster.

Message #

Cluster resource '%1' was removed from the failover cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1158 — Cluster role 'ResourceGroup' was added to the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster role 'ResourceGroup' was added to the failover cluster.

Message #

Cluster role '%1' was added to the failover cluster.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1159 — Cluster role 'ResourceGroup' was removed from the failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster role 'ResourceGroup' was removed from the failover cluster.

Message #

Cluster role '%1' was removed from the failover cluster.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1177 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Description

The Cluster service is shutting down because quorum was lost. This could be due to the loss of network connectivity between some or all nodes in the cluster, or a failover of the witness disk.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1177 — The Cluster service is shutting down because quorum was lost.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: QuorumManager

Description

The Cluster service is shutting down because quorum was lost. This could be due to the loss of network connectivity between some or all nodes in the cluster, or a failover of the witness disk.

Message #

The Cluster service is shutting down because quorum was lost. This could be due to the loss of network connectivity between some or all nodes in the cluster, or a failover of the witness disk. 
Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1181 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1181 — Cluster resource 'ResourceName' cannot be brought online because the associated service failed to start.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Message #

Cluster resource '%1' cannot be brought online because the associated service failed to start. The service return code is '%2'. Please check for additional events associated with the service and ensure the service starts correctly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1182 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1182 — Cluster resource 'ResourceName' cannot be brought online because the associated service failed an attempted restart.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Message #

Cluster resource '%1' cannot be brought online because the associated service failed an attempted restart. The error code is '%2'. The service required a restart in order to update parameters. However, the service failed before it could be stopped and restarted. Please check for additional events associated with the service and ensure the service is functioning correctly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1183 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`MountPoint` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1183 — Cluster disk resource 'ResourceName' contains an invalid mount point.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group.

Message #

Cluster disk resource '%1' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group. 
Mount point '%2' for volume '%3' references an invalid source disk. Please ensure that the source disk is also a clustered disk and in the same group as the target disk (hosting the mount point).

Fields #

Name	Description
`ResourceName` UnicodeString	—
`MountPoint` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1186 — The password associated with the Cluster service domain account is being updated on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

The password associated with the Cluster service domain account is being updated on this node.

Message #

The password associated with the Cluster service domain account is being updated on this node.

Event ID 1190 — Cluster network name resource 'ResourceName' successfully deleted its associated computer object in domain 'DomainName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' successfully deleted its associated computer object in domain 'DomainName'. The object was deleted due to failure of network name resource 'ResourceName' to come online.

Message #

Cluster network name resource '%1' successfully deleted its associated computer object in domain '%2'. The object was deleted due to failure of network name resource '%1' to come online.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—

Event ID 1191 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName'. The error code was 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1191 — Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName'. The error code was 'Status'.

Message #

Cluster network name resource '%1' failed to delete its associated computer object in domain '%2'. The error code was '%3'. 
Please have a domain administrator manually delete the computer object from the Active Directory domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1192 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName' for the following reason.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`StatusString` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1192 — Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName' for the following reason.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete its associated computer object in domain 'DomainName' for the following reason.

Message #

Cluster network name resource '%1' failed to delete its associated computer object in domain '%2' for the following reason:
%3. 

Please have a domain administrator manually delete the computer object from the Active Directory domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`StatusString` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1193 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' for the following reason: FailureString.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1193 — Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' for the following reason: FailureString.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' for the following reason: FailureString.

Message #

Cluster network name resource '%1' failed to create its associated computer object in domain '%2' for the following reason: %3.

The associated error code is: %5

Please work with your domain administrator to ensure that:
- The cluster identity '%4' can create computer objects. By default all computer objects are created in the 'Computers' container; consult the domain administrator if this location has been changed.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity '%4' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1194 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' during: FailureString.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1194 — Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' during: FailureString.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to create its associated computer object in domain 'DomainName' during: FailureString.

Message #

Cluster network name resource '%1' failed to create its associated computer object in domain '%2' during: %3.

The text for the associated error code is: %4

Please work with your domain administrator to ensure that:
- The cluster identity '%5' has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity '%5'.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity '%5' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1195 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1195 — Cluster network name resource 'ResourceName' failed registration of one or more associated DNS name(s).

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed registration of one or more associated DNS name(s). The error code was '%2'. Ensure that the network adapters associated with dependent IP address resources are configured with access to at least one DNS server.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1196 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed registration of one or more associated DNS name(s) for the following reason.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1196 — Cluster network name resource 'ResourceName' failed registration of one or more associated DNS name(s) for the following reason.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed registration of one or more associated DNS name(s) for the following reason.

Message #

Cluster network name resource '%1' failed registration of one or more associated DNS name(s) for the following reason:
%2.

Ensure that the network adapters associated with dependent IP address resources are configured with at least one accessible DNS server.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1197 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete or disable its associated computer object 'ObjectName' during resource deletion. The error code was 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ObjectName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1197 — Cluster network name resource 'ResourceName' failed to delete or disable its associated computer object 'ObjectName' during resource deletion.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete or disable its associated computer object 'ObjectName' during resource deletion. The error code was 'Status'.

Message #

Cluster network name resource '%1' failed to delete or disable its associated computer object '%2' during resource deletion. The error code was '%3'. 
Please check if the site is Read-Only. Ensure that the cluster name object has the appropriate permissions on the '%2' object in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ObjectName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1198 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete computer object with guid 'ObjectGuid'. The error code was 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ObjectGuid` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1198 — Cluster network name resource 'ResourceName' failed to delete computer object with guid 'ObjectGuid'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' failed to delete computer object with guid 'ObjectGuid'. The error code was 'Status'.

Message #

Cluster network name resource '%1' failed to delete computer object with guid '%2'. The error code was '%3'. 
Please check if the site is Read-Only. Ensure that the cluster name object has the appropriate permissions on the '%2' object in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ObjectGuid` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1200 — The Cluster service is attempting to bring the clustered role 'ResourceGroup' online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service is attempting to bring the clustered role 'ResourceGroup' online.

Message #

The Cluster service is attempting to bring the clustered role '%1' online.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1201 — The Cluster service successfully brought the clustered role 'ResourceGroup' online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service successfully brought the clustered role 'ResourceGroup' online.

Message #

The Cluster service successfully brought the clustered role '%1' online.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1203 — The Cluster service is attempting to bring the clustered role 'ResourceGroup' offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service is attempting to bring the clustered role 'ResourceGroup' offline.

Message #

The Cluster service is attempting to bring the clustered role '%1' offline.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1204 — The Cluster service successfully brought the clustered role 'ResourceGroup' offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service successfully brought the clustered role 'ResourceGroup' offline.

Message #

The Cluster service successfully brought the clustered role '%1' offline.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1205 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

The Cluster service failed to bring clustered role 'ResourceGroup' completely online or offline. One or more resources may be in a failed state. This may impact the availability of the clustered role.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1205 — The Cluster service failed to bring clustered role 'ResourceGroup' completely online or offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Message #

The Cluster service failed to bring clustered role '%1' completely online or offline. One or more resources may be in a failed state. This may impact the availability of the clustered role.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1206 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1206 — The computer object associated with the cluster network name resource 'ResourceName' could not be updated in domain 'DomainName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

The computer object associated with the cluster network name resource '%1' could not be updated in domain '%2'. The error code was '%3'. The cluster identity '%4' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1207 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

The computer object associated with the cluster network name resource 'ResourceName' could not be updated in domain 'DomainName' during the.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1207 — The computer object associated with the cluster network name resource 'ResourceName' could not be updated in domain 'DomainName' during the FailureString operation.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

The computer object associated with the cluster network name resource 'ResourceName' could not be updated in domain 'DomainName' during the.

Message #

The computer object associated with the cluster network name resource '%1' could not be updated in domain '%2' during the 
%3 operation.

The text for the associated error code is: %4
 
The cluster identity '%5' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`ClusterIdentity` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1208 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`MountPoint` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1208 — Cluster disk resource 'ResourceName' contains an invalid mount point.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group.

Message #

Cluster disk resource '%1' contains an invalid mount point. Both the source and target disks associated with the mount point must be clustered disks, and must be members of the same group. 
Mount point '%2' for volume '%3' references an invalid target disk. Please ensure that the target disk is also a clustered disk and in the same group as the source disk (hosting the mount point).

Fields #

Name	Description
`ResourceName` UnicodeString	—
`MountPoint` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1209 — Cluster service is requesting a bus reset for device 'Parameter1'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster service is requesting a bus reset for device 'Parameter1'.

Message #

Cluster service is requesting a bus reset for device '%1'.

Fields #

Name	Description
`Parameter1` UnicodeString	—

Event ID 1211 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1211 — Cluster network name resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' cannot be brought online. Attempt to locate a writeable domain controller (in domain %2) in order to create or update a computer object associated with the resource failed. The error code was '%3'. Ensure that a writeable domain controller is accessible to this node within the configured domain. Also ensure that the DNS server is running in order to resolve the name of the domain controller.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1212 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1212 — Cluster network name resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' cannot be brought online. Attempt to locate a writeable domain controller (in domain %2) in order to create or update a computer object associated with the resource failed for the following reason:
%3.

 The error code was '%4'. Ensure that a writeable domain controller is accessible to this node within the configured domain. Also ensure that the DNS server is running in order to resolve the name of the domain controller.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainName` UnicodeString	—
`FailureString` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1213 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainControllerName` UnicodeString	—
`NewName` UnicodeString	—
`OldName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1213 — Cluster network name resource 'ResourceName' could not completely rename the associated computer object on domain controller 'DomainControllerName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' could not completely rename the associated computer object on domain controller '%2'. Attempting to rename the computer object from new name '%3' back to its original name '%4' has also failed. The error code was '%5'. This may affect client connectivity until the network name and its associated computer object name are consistent. Contact your domain administrator to manually rename the computer object.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainControllerName` UnicodeString	—
`NewName` UnicodeString	—
`OldName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1214 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster Network Name resource cannot be registered with Netbios.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`FailureString` UnicodeString	—
`Name` UnicodeString	—

Event ID 1214 — Cluster Network Name resource cannot be registered with Netbios.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster Network Name resource cannot be registered with Netbios.

Message #

Cluster Network Name resource cannot be registered with Netbios. 

Network Name: '%3' 
Reason for failure: %2 
Resource name:'%1' 

 Run nbtstat for the network name to ensure that the name is not already registered with Netbios.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`FailureString` UnicodeString	—
`Name` UnicodeString	—

Event ID 1215 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1215 — Cluster network name resource 'ResourceName' failed a health check.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed a health check. Network name '%2' is no longer registered on this node.  The error code was '%3'. Check for hardware or software errors related to the network adapter. Also, you can run the Validate a Configuration wizard to check your network configuration.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1216 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 1216 — A name change operation on the cluster core netname resource has failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

A name change operation on the cluster core netname resource has failed. Attempting to revert the name change operation back to the original name has also failed. The error code was '%1'. You may not be able to remotely manage the cluster using the cluster name until this situation has been manually corrected.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 1217 — Cluster network name resource 'ResourceName' successfully changed the name property from 'OriginalName' to 'Name'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' successfully changed the name property from 'OriginalName' to 'Name'.

Message #

Cluster network name resource '%1' successfully changed the name property from '%2' to '%3'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OriginalName` UnicodeString	—
`Name` UnicodeString	—

Event ID 1218 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainController` UnicodeString	—
`OriginalName` UnicodeString	—
`Name` UnicodeString	—

Event ID 1218 — Cluster network name resource 'ResourceName' failed to perform a name change operation (attempting to change original name 'OriginalName' to name 'Name').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to perform a name change operation (attempting to change original name '%3' to name '%4').  The computer object could not be found on the domain controller '%2' (where it was created). An attempt will be made to recreate the computer object the next time the resource is brought online. Additionally, please work with your domain administrator to ensure that the computer object exists in the domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainController` UnicodeString	—
`OriginalName` UnicodeString	—
`Name` UnicodeString	—

Event ID 1219 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ComputerAccount` UnicodeString	—
`DomainController` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1219 — Cluster network name resource 'ResourceName' failed to perform a name change operation.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to perform a name change operation.  The domain controller '%2' where computer object '%3' was being renamed, could not be contacted. The error code was '%4'. Ensure a writeable domain controller is accessible and check for any connectivity issue.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ComputerAccount` UnicodeString	—
`DomainController` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1220 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

The computer account for resource 'ResourceName' failed to be renamed from OriginalName to Name using Domain Controller DomainController. The associated error code is stored in the data section.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OriginalName` UnicodeString	—
`Name` UnicodeString	—
`DomainController` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1220 — The computer account for resource 'ResourceName' failed to be renamed from OriginalName to Name using Domain Controller DomainController.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

The computer account for resource 'ResourceName' failed to be renamed from OriginalName to Name using Domain Controller DomainController. The associated error code is stored in the data section.

Message #

The computer account for resource '%1' failed to be renamed from %2 to %3 using Domain Controller %4. The associated error code is stored in the data section.
 
The computer account for this resource was in the process of being renamed and did not complete. This was detected during the online process for this resource. In order to recover, the computer account must be renamed to the current value of the Name property, i.e., the name presented on the network.
 
The Domain Controller where the renamed was attempted might not be available; if this is the case, wait for the Domain Controller to be available again. The Domain Controller could be denying access to the account; after resolving access, try to bring the name online again.
 
If this is not possible, disable and re-enable Kerberos Authentication and an attempt will be made to find the computer account on a different DC. You eed to change the Name property to %2 in order to use the existing CComputer account.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OriginalName` UnicodeString	—
`Name` UnicodeString	—
`DomainController` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1221 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`ComputerAccount` UnicodeString	—

Event ID 1221 — Cluster network name resource 'ResourceName' has a name 'Name' which does not match the corresponding computer object name 'ComputerAccount'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' has a name '%2' which does not match the corresponding computer object name '%3'.  It is likely that a previous name change of the computer object has not replicated to all domain controllers in the domain. You will be unable to rename the network name resource until the names become consistent. If the computer object has not been recently changed, please contact your domain administrator to rename the computer object and thereby make it consistent. Also, ensure that replication across domain controllers has been successfully completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Name` UnicodeString	—
`ComputerAccount` UnicodeString	—

Event ID 1222 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

The computer object associated with cluster network name resource 'ResourceName' could not be updated.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—

Event ID 1222 — The computer object associated with cluster network name resource 'ResourceName' could not be updated.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

The computer object associated with cluster network name resource 'ResourceName' could not be updated.

Message #

The computer object associated with cluster network name resource '%1' could not be updated.

The text for the associated error code is: %2
 
The cluster identity '%3' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`FailureString` UnicodeString	—
`ClusterIdentity` UnicodeString	—

Event ID 1223 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1223 — Cluster IP address resource 'ResourceName' cannot be brought online because the cluster network 'NetworkName' is not configured to allow client access.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Message #

Cluster IP address resource '%1' cannot be brought online because the cluster network '%2' is not configured to allow client access. Please use the Failover Cluster Manager snap-in to check the configured properties of the cluster network.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1224 — Cluster IP address resource 'ResourceName' has been moved to cluster network 'NetworkName' because its IP address and subnet mask match.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Message #

Cluster IP address resource '%1' has been moved to cluster network '%2' because its IP address and subnet mask match. To reverse this assignment, take resource '%1' offline, restore the '%1' Network property to its former value, set the '%1' OverrideAddressMatch property to 1, and bring resource '%1' back online.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1226 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetBiosName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1226 — Network Name resource 'ResourceName' (with associated network name 'NetBiosName') has Kerberos Authentication support enabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Network Name resource '%1' (with associated network name '%2') has Kerberos Authentication support enabled. Failed to add required credentials to the LSA - the associated error code '%3' indicates insufficient privileges normally required for this operation. The required privilege is 'Trusted Computing Base' and must be locally enabled on each node comprising the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetBiosName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1227 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Network Name resource 'ResourceName' (with associated network name 'NetBiosName') has Kerberos Authentication support enabled. Failed to add required credentials to the LSA - the associated error code is 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetBiosName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1227 — Network Name resource 'ResourceName' (with associated network name 'NetBiosName') has Kerberos Authentication support enabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Message #

Network Name resource '%1' (with associated network name '%2') has Kerberos Authentication support enabled. Failed to add required credentials to the LSA - the associated error code is '%3'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetBiosName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1228 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' encountered an error enabling the network name on this node. The reason for the failure was.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Description` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1228 — Cluster network name resource 'ResourceName' encountered an error enabling the network name on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' encountered an error enabling the network name on this node. The reason for the failure was.

Message #

Cluster network name resource '%1' encountered an error enabling the network name on this node. The reason for the failure was: 
 '%2'.

 The error code was '%3'. 

 You may take the network name resource offline and online again to retry.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Description` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1229 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1229 — Cluster network name resource 'ResourceName' was unable to identify any IP addresses to register with a DNS server.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' was unable to identify any IP addresses to register with a DNS server. Ensure that there is one or more networks that are enabled for cluster use with the 'Allow clients to connect through this network' setting, and that each node has a valid IP address configured for the networks.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1230 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceType` UnicodeString	—
`ResTypeDll` UnicodeString	—
`ResourceControl` UnicodeString	—

Event ID 1230 — A component on the server did not respond in a timely fashion.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

A component on the server did not respond in a timely fashion. This caused the cluster resource '%1' (resource type '%2', DLL '%3') to exceed its time-out threshold. As part of cluster health detection, recovery actions will be taken. The cluster will try to automatically recover by terminating and restarting the Resource Hosting Subsystem (RHS) process that is running this resource. Verify that the underlying infrastructure (such as storage, networking, or services) that are associated with the resource are functioning correctly.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceType` UnicodeString	—
`ResTypeDll` UnicodeString	—
`ResourceControl` UnicodeString	—

Event ID 1231 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' encountered an error logging on to the domain. The reason for the failure was.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Description` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1231 — Cluster network name resource 'ResourceName' encountered an error logging on to the domain.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource 'ResourceName' encountered an error logging on to the domain. The reason for the failure was.

Message #

Cluster network name resource '%1' encountered an error logging on to the domain. The reason for the failure was: 
 '%2'.

 The error code was '%3'. 

 Ensure that a domain controller is accessible to this node within the configured domain.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Description` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1232 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericScriptResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—

Event ID 1232 — Entry point 'Parameter2' in cluster generic script resource 'ResourceName' did not complete execution in a timely manner.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericScriptResource

Message #

Entry point '%2' in cluster generic script resource '%1' did not complete execution in a timely manner. This could be due to an infinite loop or other issues possibly resulting in an infinite wait. Alternatively, the specified pending timeout value may be too short for this resource. Please review the '%2' script entry point to ensure all possible infinite waits in the script code have been corrected. Then, consider increasing the pending timeout value if deemed necessary.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—

Event ID 1233 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GenericScriptResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—

Event ID 1233 — Cluster generic script resource 'ResourceName': request to perform the 'Parameter2' operation will not be processed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GenericScriptResource

Message #

Cluster generic script resource '%1': request to perform the '%2' operation will not be processed. This is due to a previously failed attempt to execute the '%3' entry point in a timely fashion. Please review the script code for this entry point to ensure there does not exist any infinite loop or other issues possibly resulting in an infinite wait. Then, consider increasing the resource pending timeout value if deemed necessary.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—

Event ID 1234 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`MissingPrivilegeList` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1234 — The Cluster service has detected that its service account is missing one or more of the required privileges.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

The Cluster service has detected that its service account is missing one or more of the required privileges. The missing privilege list is: '%1' and is not currently granted to the service account. Use the 'sc.exe qprivs clussvc' to verify the privileges of the Cluster service (ClusSvc). Additionally check for any security policies or group policies in Active Directory Domain Services that may have altered the default privileges. Type the following command to grant the Cluster service the necessary privileges to function correctly: 

sc.exe privs clussvc SeBackupPrivilege/SeRestorePrivilege/SeIncreaseQuotaPrivilege/SeIncreaseBasePriorityPrivilege/SeTcbPrivilege/SeDebugPrivilege/SeSecurityPrivilege/SeAuditPrivilege/SeImpersonatePrivilege/SeChangeNotifyPrivilege/SeIncreaseWorkingSetPrivilege/SeManageVolumePrivilege/SeCreateSymbolicLinkPrivilege/SeLoadDriverPrivilege

Fields #

Name	Description
`MissingPrivilegeList` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1237 — Cluster resource 'ResourceName' entered maintenance mode.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceHostSubsystem

Description

Cluster resource 'ResourceName' entered maintenance mode. The associated status is 'Status'.

Message #

Cluster resource '%1' entered maintenance mode. The associated status is '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1238 — Cluster resource 'ResourceName' exited maintenance mode.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceHostSubsystem

Description

Cluster resource 'ResourceName' exited maintenance mode. The associated status is 'Status'.

Message #

Cluster resource '%1' exited maintenance mode. The associated status is '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1239 — Cluster IP address resource 'ResourceName' obtained a leased IP address 'IPAddress'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' obtained a leased IP address 'IPAddress'.

Message #

Cluster IP address resource '%1' obtained a leased IP address '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1240 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to obtain a leased IP address.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1240 — Cluster IP address resource 'ResourceName' failed to obtain a leased IP address.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to obtain a leased IP address.

Message #

Cluster IP address resource '%1' failed to obtain a leased IP address.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1241 — Cluster IP address resource 'ResourceName' released lease of IP address 'IPAddress'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' released lease of IP address 'IPAddress'.

Message #

Cluster IP address resource '%1' released lease of IP address '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1242 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1242 — Lease of IP address 'IPAddress' associated with cluster IP address resource 'ResourceName' has expired or is about to expire, and currently cannot be renewed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Message #

Lease of IP address '%2' associated with cluster IP address resource '%1' has expired or is about to expire, and currently cannot be renewed. Ensure that the associated DHCP server is accessible and properly configured to renew the lease on this IP address.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1243 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to release the lease for IP address 'IPAddress'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1243 — Cluster IP address resource 'ResourceName' failed to release the lease for IP address 'IPAddress'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to release the lease for IP address 'IPAddress'.

Message #

Cluster IP address resource '%1' failed to release the lease for IP address '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1244 — Cluster IP address resource 'ResourceName' renewed the lease for IP address 'IPAddress'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' renewed the lease for IP address 'IPAddress'.

Message #

Cluster IP address resource '%1' renewed the lease for IP address '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—

Event ID 1245 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to renew the lease for IP address 'IPAddress'. Ensure that the DHCP server is accessible and properly configured to renew the lease on this IP address.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1245 — Cluster IP address resource 'ResourceName' failed to renew the lease for IP address 'IPAddress'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Message #

Cluster IP address resource '%1' failed to renew the lease for IP address '%2'. Ensure that the DHCP server is accessible and properly configured to renew the lease on this IP address.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1246 — Settings have changed for cluster network 'NetworkName' which affect cluster IP address resource 'ResourceName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Settings have changed for cluster network 'NetworkName' which affect cluster IP address resource 'ResourceName'. Attempting to renew lease for the IP address resource.

Message #

Settings have changed for cluster network '%2' which affect cluster IP address resource '%1'. Attempting to renew lease for the IP address resource.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 1247 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`ServiceSIDType` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1247 — The Security Identifier (SID) type for the cluster service is configured as 'ServiceSIDType' but the expected SID type is 'Unrestricted'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

The Security Identifier (SID) type for the cluster service is configured as '%1' but the expected SID type is 'Unrestricted'. The cluster service is automatically modifying its SID type configuration with the Service Control Manager (SCM) and will restart in order for this change to take effect.

Fields #

Name	Description
`ServiceSIDType` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1248 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

The Security Identifier (SID) 'ServiceSID' associated with the cluster service is not present in the process token. The cluster service will automatically correct this problem and restart.

Fields #

Name	Description
`ServiceSID` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1248 — The Security Identifier (SID) 'ServiceSID' associated with the cluster service is not present in the process token.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Description

The Security Identifier (SID) 'ServiceSID' associated with the cluster service is not present in the process token. The cluster service will automatically correct this problem and restart.

Message #

The Security Identifier (SID) '%1' associated with the cluster service is not present in the process token. The cluster service will automatically correct this problem and restart.

Fields #

Name	Description
`ServiceSID` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1249 — Cluster IPv6 tunnel address resource 'ResourceName' has been updated to match the tunnel type supported by the cluster node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPv6TunnelResource

Message #

Cluster IPv6 tunnel address resource '%1' has been updated to match the tunnel type supported by the cluster node. The tunnel type has changed from '%2' to '%3' and the address has been set to '%4'. If this change is unexpected, please check the IP address resource on which the IPv6 tunnel address resource '%1' depends, as well as the IPv6 configuration of your network and all cluster nodes.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Parameter2` UnicodeString	—
`Parameter3` UnicodeString	—
`Parameter4` UnicodeString	—

Event ID 1250 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—

Event ID 1250 — Cluster resource 'ResourceName' in clustered role 'ResourceGroup' has received a critical state notification.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Cluster resource '%1' in clustered role  '%2' has received a critical state notification.  For a virtual machine this indicates that an application or service inside the virtual machine is in an unhealthy state. Verify the functionality of the service or application being monitored within the virtual machine.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—

Event ID 1251 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`Preemptor` UnicodeString	—
`Preemptee` UnicodeString	—

Event ID 1251 — Clustered role 'Preemptee' was taken offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Clustered role '%2' was taken offline. This role was preempted by the higher priority clustered role '%1'. The cluster service will attempt to bring clustered role '%2' online later when system resources are available.

Fields #

Name	Description
`Preemptor` UnicodeString	—
`Preemptee` UnicodeString	—

Event ID 1252 — Cluster resource 'ResourceName' in clustered role 'GroupName' rejected a move request to node 'NodeName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Message #

Cluster resource '%1' in clustered role '%2' rejected a move request to node '%3'. The error code was '%4'.  Cluster resource '%1' may be busy or in a state where it cannot be moved.  The cluster service may automatically retry the move.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`NodeName` UnicodeString	—
`ApplicationErrorCode` UInt32	—

Event ID 1253 — Resource 'ResourceName' of the clustered role 'GroupName' vetoed the untargeted move with application specific error code 'ApplicationErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Resource 'ResourceName' of the clustered role 'GroupName' vetoed the untargeted move with application specific error code 'ApplicationErrorCode'.

Message #

Resource '%1' of the clustered role '%2' vetoed the untargeted move with application specific error code '%3'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`ApplicationErrorCode` UInt32	—

Event ID 1254 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1254 — Clustered role 'ResourceGroup' has exceeded its failover threshold.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Clustered role '%1' has exceeded its failover threshold.  It has exhausted the configured number of failover attempts within the failover period of time allotted to it and will be left in a failed state.  No additional attempts will be made to bring the role online or fail it over to another node in the cluster.  Please check the events associated with the failure.  After the issues causing the failure are resolved the role can be brought online manually or the cluster may attempt to bring it online again after the restart delay period.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1255 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—

Event ID 1255 — Cluster resource 'ResourceName' in clustered role 'ResourceGroup' has received a critical state notification.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Cluster resource '%1' in clustered role  '%2' has received a critical state notification.  For a virtual machine this indicates that a critical network of the virtual machine is in an unhealthy state. Verify the network connectivity of the virtual machine and the virtual networks that the virtual machine is configured to use.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—

Event ID 1256 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS names(s) because the corresponding DNS Zone does not accept dynamic updates.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1256 — Cluster network name resource failed registration of one or more associated DNS names(s) because the corresponding DNS Zone does not accept dynamic...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS names(s) because the corresponding DNS Zone does not accept dynamic updates.

Message #

Cluster network name resource failed registration of one or more associated DNS names(s) because the corresponding DNS Zone does not accept dynamic updates.

Cluster Network name: '%1'
DNS Zone: '%2'

Guidance:
Ensure that the DNS is configured as a Dynamic DNS zone. If the DNS server does not accept dynamic updates uncheck the   'Register this connection's' addresses in DNS' in the properties of the network adapter.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1257 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1257 — Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied.

Message #

Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied.

Cluster Network name: '%1'
DNS Zone: '%2'

Ensure that cluster name object (CNO) is granted permissions to the Secure DNS Zone.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1258 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS name(s) because the a DNS server could not be reached.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—
`DNSServers` UnicodeString	—

Event ID 1258 — Cluster network name resource failed registration of one or more associated DNS name(s) because the a DNS server could not be reached.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS name(s) because the a DNS server could not be reached.

Message #

Cluster network name resource failed registration of one or more associated DNS name(s) because the a DNS server could not be reached.

Cluster Network name: '%1'
DNS Zone: '%2'
DNS Server: '%3'

Ensure that the network adapters associated with dependent IP address resources are configured with at least one accessible DNS server.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—
`DNSServers` UnicodeString	—

Event ID 1259 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS name(s) because the cluster service failed clean up the existing records corresponding to the network name.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1259 — Cluster network name resource failed registration of one or more associated DNS name(s) because the cluster service failed clean up the existing re...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed registration of one or more associated DNS name(s) because the cluster service failed clean up the existing records corresponding to the network name.

Message #

Cluster network name resource failed registration of one or more associated DNS name(s) because the cluster service failed clean up the existing records corresponding to the network name.

Cluster Network name: '%1'
DNS Zone: '%2'

Ensure that cluster name object (CNO) is granted permissions to the Secure DNS Zone.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DNSZone` UnicodeString	—

Event ID 1260 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to modify the DNS registration.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1260 — Cluster network name resource failed to modify the DNS registration.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to modify the DNS registration.

Message #

Cluster network name resource failed to modify the DNS registration.

Cluster Network name: '%1'
Error code: '%2'

Guidance:
Ensure that the network adapters associated with dependent IP address resources are configured with access to at least one DNS server.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1261 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to modify the DNS registration.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1261 — Cluster network name resource failed to modify the DNS registration.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to modify the DNS registration.

Message #

Cluster network name resource failed to modify the DNS registration.

Cluster Network name: '%1'
Reason: '%2'

Guidance:
Ensure that the network adapters associated with dependent IP address resources are configured with access to at least one DNS server.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1263 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1263 — Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Message #

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Cluster Network name: '%1'
Error Code: '%2'

Guidance:

Ensure that the network adapters associated with dependent IP address resources are configured with access to at least one DNS server and that the DNS reverse lookup zone exists.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1264 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1264 — Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Message #

Cluster network name resource failed to publish the PTR record in the DNS reverse lookup zone.

Cluster Network name: '%1'
Reason: '%2'

Guidance:

Ensure that the network adapters associated with dependent IP address resources are configured with access to at least one DNS server and that the DNS reverse lookup zone exists.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`StatusString` UnicodeString	—

Event ID 1265 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`ResourceTypeName` UnicodeString	—
`ControlCode` UnicodeString	—

Event ID 1265 — Cluster resource type 'ResourceTypeName' timed out while processing the control code ControlCode.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Cluster resource type '%1' timed out while processing the control code %2. The cluster will try to automatically recover by terminating and restarting the Resource Hosting Subsystem (RHS) process that was processing the call.

Fields #

Name	Description
`ResourceTypeName` UnicodeString	—
`ControlCode` UnicodeString	—

Event ID 1280 — Sponsor tried to Create Security Context using Package='PackageName' with Context Requirement ='ContextRequirement' and Timeout ='Timeout'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Description

Sponsor tried to Create Security Context using Package='PackageName' with Context Requirement ='ContextRequirement' and Timeout ='Timeout'.

Message #

Sponsor tried to Create Security Context using Package='%1' with Context Requirement ='%2' and Timeout ='%3'

Fields #

Name	Description
`PackageName` UnicodeString	—
`ContextRequirement` UnicodeString	—
`Timeout` UnicodeString	—

Event ID 1281 — Joiner tried to Create Security Context using Package='PackageName' with Context Requirement ='ContextRequirement' and Timeout ='Timeout' for the target = 'Target'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Description

Joiner tried to Create Security Context using Package='PackageName' with Context Requirement ='ContextRequirement' and Timeout ='Timeout' for the target = 'Target'.

Message #

Joiner tried to Create Security Context using Package='%1' with Context Requirement ='%2' and Timeout ='%3' for the target = '%4'

Fields #

Name	Description
`PackageName` UnicodeString	—
`ContextRequirement` UnicodeString	—
`Timeout` UnicodeString	—
`Target` UnicodeString	—

Event ID 1282 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Description

Security Handshake between local and remote endpoints 'ConnectionInfo' did not complete in 'Timeout' seconds, node terminating the connection.

Fields #

Name	Description
`Timeout` UnicodeString	—
`ConnectionInfo` UnicodeString	—

Event ID 1282 — Security Handshake between local and remote endpoints 'ConnectionInfo' did not complete in 'Timeout' seconds, node terminating the connection.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: SecurityManager

Description

Security Handshake between local and remote endpoints 'ConnectionInfo' did not complete in 'Timeout' seconds, node terminating the connection.

Message #

Security Handshake between local and remote endpoints '%2' did not complete in '%1' seconds, node terminating the connection

Fields #

Name	Description
`Timeout` UnicodeString	—
`ConnectionInfo` UnicodeString	—

Event ID 1289 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1289 — The Cluster Service was unable to access network adapter 'NetftDisplayName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

The Cluster Service was unable to access network adapter '%1'. Verify that other network adapters are functioning properly and check the device manager for errors associated with adapter '%1'. If the configuration for adapter '%1' has been changed, it may become necessary to reinstall the failover clustering feature on this computer.

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1360 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkProperty` UnicodeString	—
`AddressProperty` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1360 — Cluster IP address resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Message #

Cluster IP address resource '%1' failed to come online. Ensure the network property '%2' matches a cluster network name or the address property '%3' matches one of the subnets on a cluster network. If this is an IPv6 Address type, please verify that the cluster network matching this resource has at least one IPv6 prefix that is not link-local or tunnel.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkProperty` UnicodeString	—
`AddressProperty` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1361 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPv6TunnelResource

Description

IPv6 Tunnel address resource 'ResourceName' failed to come online because it does not depend on an IP Address (IPv4) resource. Dependency on at least one IP Address (IPv4) resource is required.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1361 — IPv6 Tunnel address resource 'ResourceName' failed to come online because it does not depend on an IP Address (IPv4) resource.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPv6TunnelResource

Description

IPv6 Tunnel address resource 'ResourceName' failed to come online because it does not depend on an IP Address (IPv4) resource. Dependency on at least one IP Address (IPv4) resource is required.

Message #

IPv6 Tunnel address resource '%1' failed to come online because it does not depend on an IP Address (IPv4) resource. Dependency on at least one IP Address (IPv4) resource is required.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1362 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to come online because the 'NetworkProperty' property could not be read. Please ensure that the resource is correctly configured.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkProperty` UnicodeString	—

Event ID 1362 — Cluster IP address resource 'ResourceName' failed to come online because the 'NetworkProperty' property could not be read.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPAddressResource

Description

Cluster IP address resource 'ResourceName' failed to come online because the 'NetworkProperty' property could not be read. Please ensure that the resource is correctly configured.

Message #

Cluster IP address resource '%1' failed to come online because the '%2' property could not be read. Please ensure that the resource is correctly configured.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkProperty` UnicodeString	—

Event ID 1363 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: IPv6TunnelResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—
`DependantName` UnicodeString	—

Event ID 1363 — IPv6 tunnel address resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: IPv6TunnelResource

Message #

IPv6 tunnel address resource '%1' failed to come online. Cluster network '%2' associated with dependent IP address (IPv4) resource '%3' does not support ISATAP tunneling. Please ensure that the cluster network supports ISATAP tunneling.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkName` UnicodeString	—
`DependantName` UnicodeString	—

Event ID 1537 — A backup operation of the cluster configuration data has been initiated.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

A backup operation of the cluster configuration data has been initiated.

Message #

A backup operation of the cluster configuration data has been initiated.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1538 — The backup operation for the cluster configuration data completed successfully.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

The backup operation for the cluster configuration data completed successfully. The snapshot ID is 'SnapShotID'.

Message #

The backup operation for the cluster configuration data completed successfully. The snapshot ID is '%1'.

Fields #

Name	Description
`SnapShotID` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1539 — A restore operation of the cluster configuration data has been initiated.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

A restore operation of the cluster configuration data has been initiated.

Message #

A restore operation of the cluster configuration data has been initiated.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1540 — The restore operation for the cluster configuration data completed successfully.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

The restore operation for the cluster configuration data completed successfully.

Message #

The restore operation for the cluster configuration data completed successfully.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1541 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

The backup operation for the cluster configuration data has been aborted because quorum for the cluster has not yet been achieved. Please retry this backup operation after the cluster achieves quorum.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1541 — The backup operation for the cluster configuration data has been aborted because quorum for the cluster has not yet been achieved.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterBackup/Restore

Description

Message #

The backup operation for the cluster configuration data has been aborted because quorum for the cluster has not yet been achieved. Please retry this backup operation after the cluster achieves quorum.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1542 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1542 — The restore request for the cluster configuration data has failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterBackup/Restore

Message #

The restore request for the cluster configuration data has failed. This restore failed during the 'pre-restore' stage usually indicating that some nodes comprising the cluster are not currently operational. Ensure that the cluster service is running successfully on all nodes comprising this cluster.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1543 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Fields #

Name	Description
`SafeCopy` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1543 — The restore operation of the cluster configuration data has failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterBackup/Restore

Message #

The restore operation of the cluster configuration data has failed. This restore failed during the 'post-restore' stage usually indicating that some nodes comprising the cluster are not currently operational. It is recommended that you replace the current cluster configuration data file (ClusDB) with '%1'.

Fields #

Name	Description
`SafeCopy` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1544 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Description

The backup operation for the cluster configuration data has been canceled. The cluster Volume Shadow Copy Service (VSS) writer received an abort request.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1544 — The backup operation for the cluster configuration data has been canceled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterBackup/Restore

Description

The backup operation for the cluster configuration data has been canceled. The cluster Volume Shadow Copy Service (VSS) writer received an abort request.

Message #

The backup operation for the cluster configuration data has been canceled. The cluster Volume Shadow Copy Service (VSS) writer received an abort request.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1545 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterBackup/Restore

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1545 — The restore operation for the cluster configuration data has failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterBackup/Restore

Message #

The restore operation for the cluster configuration data has failed. This was due to insufficient privileges associated with the user account performing the restore. Please ensure that the user account has local administrator privileges.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1546 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1546 — Node 'NodeName' failed to form a failover cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Node '%1' failed to form a failover cluster. This was due to one or more nodes executing incompatible versions of the cluster service software. If node '%1' or a different node in the cluster has been recently upgraded, please re-verify that all nodes are executing compatible versions of the cluster service software.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1547 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1547 — Node 'NodeName' attempted to join a failover cluster but failed due to incompatibility between versions of the cluster service software.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Node '%1' attempted to join a failover cluster but failed due to incompatibility between versions of the cluster service software. If node '%1' or a different node in the cluster has been recently upgraded, please verify that the changed cluster deployment with different versions of the cluster service software is supported.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1548 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1548 — Node 'LocalNodeName' established communication with node 'RemoteNodeName' and detected that it is running a different, but compatible, version of the operating system.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Node '%1' established communication with node '%2' and detected that it is running a different, but compatible, version of the operating system. We recommend that all nodes run the same version of the operating system. After all nodes have been upgraded, run the Update-ClusterFunctionalLevel Windows PowerShell cmdlet to complete upgrading the cluster.

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1549 — Node 'NodeName' successfully became part of a failover cluster and detected that its cluster service software has been updated.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Node 'NodeName' successfully became part of a failover cluster and detected that its cluster service software has been updated.

Message #

Node '%1' successfully became part of a failover cluster and detected that its cluster service software has been updated.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1550 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1550 — Node 'LocalNodeName' established a communication session with node 'RemoteNodeName' without performing a version compatibility check because version compatibility checkin...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Node '%1' established a communication session with node '%2' without performing a version compatibility check because version compatibility checking is disabled. Disabling version compatibility checking is not supported.

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1551 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Node 'NodeName' formed a failover cluster without performing a version compatibility check because version compatibility checking is disabled. Disabling version compatibility checking is not supported.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1551 — Node 'NodeName' formed a failover cluster without performing a version compatibility check because version compatibility checking is disabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Message #

Node '%1' formed a failover cluster without performing a version compatibility check because version compatibility checking is disabled. Disabling version compatibility checking is not supported.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1552 — The cluster service detected that the witness disk designation has changed - usually indicating that the current node has stale cluster configurati...

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Message #

The cluster service detected that the witness disk designation has changed - usually indicating that the current node has stale cluster configuration data. This condition will be automatically reconciled when the current node connects to other nodes that have the latest configuration data. Please ensure that all cluster nodes are running.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1553 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Fields #

Name	Description
`ArbitrationDelay` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1553 — This cluster node has no network connectivity.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Message #

This cluster node has no network connectivity. It cannot participate in the cluster until connectivity is restored.  Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`ArbitrationDelay` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1554 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Description

This cluster node has lost all network connectivity. It cannot participate in the cluster until connectivity is restored. The cluster service on this node will be terminated.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1554 — This cluster node has lost all network connectivity.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Description

This cluster node has lost all network connectivity. It cannot participate in the cluster until connectivity is restored. The cluster service on this node will be terminated.

Message #

This cluster node has lost all network connectivity. It cannot participate in the cluster until connectivity is restored. The cluster service on this node will be terminated.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1555 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1555 — Attempting to use IPv4 for 'NetftDisplayName' network adapter failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

Attempting to use IPv4 for '%1' network adapter failed. This was due to a failure to disable IPv4 auto-configuration and DHCP. This may be expected if the DHCP Client service is already disabled.  IPv6 will be used if enabled, otherwise this node may not be able to participate in a failover cluster.

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1556 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

The cluster service encountered an unexpected problem and will be shut down. The error code was 'Status'.

Fields #

Name	Description
`NodeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1556 — The cluster service encountered an unexpected problem and will be shut down.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

The cluster service encountered an unexpected problem and will be shut down. The error code was 'Status'.

Message #

The cluster service encountered an unexpected problem and will be shut down. The error code was '%2'.

Fields #

Name	Description
`NodeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1557 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Description

Cluster service failed to update the cluster configuration data on the witness resource. Please ensure that the witness resource is online and accessible.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1557 — Cluster service failed to update the cluster configuration data on the witness resource.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: QuorumManager

Description

Cluster service failed to update the cluster configuration data on the witness resource. Please ensure that the witness resource is online and accessible.

Message #

Cluster service failed to update the cluster configuration data on the witness resource. Please ensure that the witness resource is online and accessible.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1558 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1558 — The cluster service detected a problem with the witness resource.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: QuorumManager

Message #

The cluster service detected a problem with the witness resource. The witness resource will be failed over to another node within the cluster in an attempt to reestablish access to cluster configuration data.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1559 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Fields #

Name	Description
`ShareName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1559 — File share 'ShareName' associated with the file share witness resource is currently hosted by server 'NodeName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: QuorumManager

Message #

File share '%1' associated with the file share witness resource is currently hosted by server '%2'. This server '%2' has just been added as a new node within the failover cluster. Hosting of the file share witness by any node comprising the same cluster is not recommended. Please choose a file share witness that is not hosted by any node within the same cluster and modify settings of the file share witness resource accordingly.

Fields #

Name	Description
`ShareName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1560 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1560 — Cluster file share resource 'ResourceName' has detected shared folder conflicts.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareResource

Message #

Cluster file share resource '%1' has detected shared folder conflicts. As a result, some of these shared folders may not be accessible. To rectify this situation, ensure multiple shared folders do not have the same share name.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1561 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1561 — Cluster service failed to start because this node detected that it does not have the latest copy of cluster configuration data.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Cluster service failed to start because this node detected that it does not have the latest copy of cluster configuration data. Changes to the cluster occurred while this node was not in membership and as a result was not able to receive configuration data updates.

Guidance:
Attempt to start the cluster service on all nodes in the cluster so that nodes with the latest copy of the cluster configuration data can first form the cluster. This node will then be able join the cluster and will automatically obtain the updated cluster configuration data. If there are no nodes available with the latest copy of the cluster configuration data, run the 'Start-ClusterNode -FQ' Windows PowerShell cmdlet. Using the ForceQuorum (FQ) parameter will start the cluster service and mark this node's copy of the cluster configuration data to be authoritative.  Forcing quorum on a node with an outdated copy of the cluster database may result in cluster configuration changes that occurred while the node was not participating in the cluster to be lost.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1562 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed a periodic health check on file share 'ShareName'. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1562 — File share witness resource 'ResourceName' failed a periodic health check on file share 'ShareName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed a periodic health check on file share 'ShareName'. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Message #

File share witness resource '%1' failed a periodic health check on file share '%2'. Please ensure that file share '%2' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1563 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed to come online. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1563 — File share witness resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed to come online. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Message #

File share witness resource '%1' failed to come online. Please ensure that file share '%2' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1564 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed to arbitrate for the file share 'ShareName'. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1564 — File share witness resource 'ResourceName' failed to arbitrate for the file share 'ShareName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileShareWitnessResource

Description

File share witness resource 'ResourceName' failed to arbitrate for the file share 'ShareName'. Please ensure that file share 'ShareName' exists and is accessible by the cluster.

Message #

File share witness resource '%1' failed to arbitrate for the file share '%2'. Please ensure that file share '%2' exists and is accessible by the cluster.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1565 — This cluster node is running with a different message security level ('LocalSecurityLevel') than remote node 'NodeName' ('RemoteSecurityLevel').

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Message #

This cluster node is running with a different message security level ('%1') than remote node '%3' ('%2'). These two nodes will attempt to negotiate a mutually compatible message security level for this connection. Please ensure that the '%4' cluster property is configured correctly and that the cluster service has been restarted on all nodes since it was last changed.

Fields #

Name	Description
`LocalSecurityLevel` UnicodeString	—
`RemoteSecurityLevel` UnicodeString	—
`NodeName` UnicodeString	—
`PropertyName` UnicodeString	—

Event ID 1566 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1566 — Cluster network name resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' cannot be brought online.  The network name resource was terminated by the resource host subsystem because it did not complete an operation in an acceptable time.  The operation timed out while performing:
 '%2'

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1567 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: LogMgr

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1567 — Cluster service failed to change the trace log size.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: LogMgr

Message #

Cluster service failed to change the trace log size. Please verify the ClusterLogSize setting with the 'Get-Cluster | Format-List *' PowerShell cmdlet. Also, use the Performance Monitor snapin to verify the event trace session settings for FailoverClustering.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1568 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1568 — Cluster disk resource 'ResourceName' found the disk identifier to be stale.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

Cluster disk resource '%1' found the disk identifier to be stale. This may be expected if a restore operation was just performed or if this cluster uses replicated storage. The DiskSignature or DiskUniqueIds property for the disk resource has been corrected.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1569 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Fields #

Name	Description
`NetworkName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1569 — Network 'NetworkName' which has been disabled for failover cluster use, was found to be the only currently possible network that node 'NodeName' can use to commun...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Message #

Network '%1' which has been disabled for failover cluster use, was found to be the only currently possible network that node '%2' can use to communicate with other nodes in the cluster. This may impact the node's ability to participate in the cluster. Please verify network connectivity of node '%2' and enable at least one network for cluster communication. Run the Validate a Configuration wizard to check your network configuration.

Fields #

Name	Description
`NetworkName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1570 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1570 — Node 'NodeName' failed to establish a communication session while joining the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: SecurityManager

Message #

Node '%1' failed to establish a communication session while joining the cluster. This was due to an authentication failure. Please verify that the nodes are running compatible versions of the cluster service software.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1571 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: SecurityManager

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1571 — Node 'NodeName' failed to establish a communication session while joining the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: SecurityManager

Message #

Node '%1' failed to establish a communication session while joining the cluster. This was due to an authorization failure. Please verify that the nodes are running compatible versions of the cluster service software.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1572 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1572 — Node 'NodeName' failed to join the cluster because it could not send and receive failure detection network messages with other cluster nodes.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

Node '%1' failed to join the cluster because it could not send and receive failure detection network messages with other cluster nodes. Please run the Validate a Configuration wizard to ensure network settings. Also verify the Windows Firewall 'Failover Clusters' rules.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1573 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: QuorumManager

Description

Node 'NodeName' failed to form a cluster. This was because the witness was not accessible. Please ensure that the witness resource is online and available.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1573 — Node 'NodeName' failed to form a cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: QuorumManager

Description

Node 'NodeName' failed to form a cluster. This was because the witness was not accessible. Please ensure that the witness resource is online and available.

Message #

Node '%1' failed to form a cluster. This was because the witness was not accessible. Please ensure that the witness resource is online and available.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1574 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Description

The failover cluster database could not be unloaded. If restarting the cluster service does not fix the problem, please restart the machine.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1574 — The failover cluster database could not be unloaded.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Description

The failover cluster database could not be unloaded. If restarting the cluster service does not fix the problem, please restart the machine.

Message #

The failover cluster database could not be unloaded. If restarting the cluster service does not fix the problem, please restart the machine.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1575 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1575 — An attempt to forcibly start the cluster service has failed because the cluster configuration data on this node is either missing or corrupt.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Message #

An attempt to forcibly start the cluster service has failed because the cluster configuration data on this node is either missing or corrupt. Please first start the cluster service on another node that has an intact and valid copy of the cluster configuration data. Then, reattempt the start operation on this node (which will attempt to obtain updated valid configuration information automatically). If no other node is available, please use WBAdmin.msc to perform a System State Restore of this node in order to restore the configuration data.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1576 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1576 — Cluster network name resource 'ResourceName' failed to register the name 'DnsName' over adapter 'AdapterName' in a secure DNS zone.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to register the name '%2' over adapter '%4' in a secure DNS zone. This was due to an existing record with this name and the cluster identity does not have the sufficient privileges to update that record. The error code was '%3'. Please contact your DNS server administrator to verify the cluster identity has permissions on DNS record '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1577 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1577 — Cluster network name resource 'ResourceName' failed to register the name 'DnsName' over adapter 'AdapterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to register the name '%2' over adapter '%4'. The DNS server could not be contacted. The error code was '%3.' Ensure that a DNS server is accessible from this cluster node. The DNS registration will be retried later.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1578 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1578 — Cluster network name resource 'ResourceName' failed to register dynamic updates for name 'DnsName' over adapter 'AdapterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to register dynamic updates for name '%2' over adapter '%4'. The DNS server may not be configured to accept dynamic updates. The error code was '%3'. Please contact your DNS server administrator to verify that the DNS server is available and configured for dynamic updates.

Alternatively, you can disable dynamic DNS updates by unchecking the 'Register this connection's addresses in DNS' setting in the advanced TCP/IP settings for adapter '%4' under the DNS tab.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1579 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1579 — Cluster network name resource 'ResourceName' failed to update the DNS record for name 'DnsName' over adapter 'AdapterName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to update the DNS record for name '%2' over adapter '%4'. The error code was '%3'. Ensure that a DNS server is accessible from this cluster node and contact your DNS server administrator to verify the cluster identity can update the DNS record '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1580 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1580 — Cluster network name resource 'ResourceName' failed to register the name 'DnsName' over adapter 'AdapterName' in a secure DNS zone.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' failed to register the name '%2' over adapter '%4' in a secure DNS zone. This was due to an existing record with this name and the cluster identity does not have the sufficient privileges to update that record. The error code was '%3'. Please contact your DNS server administrator to verify the cluster identity has permissions on DNS record '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdapterName` UnicodeString	—
`BinaryParameterLength` UInt32	—
`BinaryData` Binary	—

Event ID 1581 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Fields #

Name	Description
`OriginalFileName` UnicodeString	—
`NewFileName` UnicodeString	—

Event ID 1581 — The restore request for the cluster configuration data failed to make a copy of the existing cluster configuration data file (ClusDB).

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Message #

The restore request for the cluster configuration data failed to make a copy of the existing cluster configuration data file (ClusDB). While attempting to preserve the existing configuration, the restore operation was unable to create a copy at location '%1'. This might be expected if the existing configuration data file was corrupt. The restore operation has continued but attempts to revert to the existing cluster configuration may not be possible.

Fields #

Name	Description
`OriginalFileName` UnicodeString	—
`NewFileName` UnicodeString	—

Event ID 1582 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Fields #

Name	Description
`OriginalFileName` UnicodeString	—
`NewFileName` UnicodeString	—

Event ID 1582 — Cluster Service failed to move the restored cluster hive at 'OriginalFileName' to 'NewFileName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Message #

Cluster Service failed to move the restored cluster hive at '%1' to '%2'.  This may prevent the restore operation from succeeding successfully.  If the cluster configuration was not properly restored, please retry the restore action.

Fields #

Name	Description
`OriginalFileName` UnicodeString	—
`NewFileName` UnicodeString	—

Event ID 1583 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1583 — Cluster service failed to disable Internet Protocol security (IPsec) on the Failover cluster virtual adapter 'NetftDisplayName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Cluster service failed to disable Internet Protocol security (IPsec) on the Failover cluster virtual adapter '%1'. This could have a negative impact on cluster communication performance. If this problem persists, please verify your local and domain connection security policies applying to IPSec and the Windows Firewall. Additionally, please check for events related to the Base Filtering Engine service.

Fields #

Name	Description
`NetftDisplayName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1584 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`VolumeGuidName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 1584 — A backup application initiated a VSS snapshot on Cluster Shared Volume 'VolumeName' ('ResourceName') without properly preparing the volume for snapshot.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

A backup application initiated a VSS snapshot on Cluster Shared Volume '%1' ('%3') without properly preparing the volume for snapshot. This snapshot may be invalid and the backup may not be usable for restore operations. Please contact your backup application vendor to verify compatibility with Cluster Shared Volumes.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`VolumeGuidName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 1585 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Description

Cluster file server resource '' failed a health check. This was due to the Server service not being started. Please use Server Manager to confirm the state of the Server service on this cluster node.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1585 — Cluster file server resource 'ResourceName' failed a health check.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Description

Cluster file server resource '' failed a health check. This was due to the Server service not being started. Please use Server Manager to confirm the state of the Server service on this cluster node.

Message #

Cluster file server resource '%1' failed a health check. This was due to the Server service not being started. Please use Server Manager to confirm the state of the Server service on this cluster node.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1586 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkNameResourceName` UnicodeString	—
`NumberOfSharesChecked` UnicodeString	—

Event ID 1586 — Cluster file server resource 'ResourceName' failed a health check.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Message #

Cluster file server resource '%1' failed a health check. This was because some of its shared folders were inaccessible. Verify that the folders are accessible from clients. Additionally, confirm the state of the Server service on this cluster node using Server Manager and look for other events related to the Server service on this cluster node. It may be necessary to restart the network name resource '%2' in this clustered role.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NetworkNameResourceName` UnicodeString	—
`NumberOfSharesChecked` UnicodeString	—

Event ID 1587 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NumberOfSharesChecked` UnicodeString	—
`LastShareError` UnicodeString	—

Event ID 1587 — Cluster file server resource 'ResourceName' failed a health check.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Message #

Cluster file server resource '%1' failed a health check. This was because some of its shared folders were inaccessible. Verify that the folders are accessible from clients. Additionally, confirm the state of the Server service on this cluster node using Server Manager and look for other events related to the Server service on this cluster node.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NumberOfSharesChecked` UnicodeString	—
`LastShareError` UnicodeString	—

Event ID 1588 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1588 — Cluster file server resource 'ResourceName' cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Message #

Cluster file server resource '%1' cannot be brought online. The resource failed to create file share '%2' associated with network name '%3'. The error code was '%4'. Verify that the folders exist and are accessible. Additionally, confirm the state of the Server service on this cluster node using Server Manager and look for other related events on this cluster node. It may be necessary to restart the network name resource '%3' in this clustered role.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ShareName` UnicodeString	—
`ShareScopeName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1589 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`IPAddress` UnicodeString	—

Event ID 1589 — Cluster network name resource 'ResourceName' found one or more IP addresses associated with DNS name 'DnsName' that are not dependent IP address resources.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource '%1' found one or more IP addresses associated with DNS name '%2' that are not dependent IP address resources. The additional addresses found were '%3'. This may affect client connectivity until the network name and its associated DNS records are consistent. Please contact your DNS server administrator to verify the records associated with name '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DnsName` UnicodeString	—
`IPAddress` UnicodeString	—

Event ID 1592 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1592 — Cluster node 'LocalNodeName' lost communication with cluster node 'RemoteNodeName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Message #

Cluster node '%1' lost communication with cluster node '%2'.  Network communication was reestablished. This could be due to communication temporarily being blocked by a firewall or connection security policy update. If the problem persists and network communication are not reestablished, the cluster service on one or more nodes will stop.  If that happens, run the Validate a Configuration wizard to check your network configuration. Additionally, check for hardware or software errors related to the network adapters on this node, and check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`LocalNodeName` UnicodeString	—
`RemoteNodeName` UnicodeString	—

Event ID 1593 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DatabaseMgr

Fields #

Name	Description
`BadDatabaseFilePath` UnicodeString	—
`DatabaseFilePath` UnicodeString	—

Event ID 1593 — The failover cluster database could not be unloaded and any potentially incorrect changes in memory could not be discarded.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DatabaseMgr

Message #

The failover cluster database could not be unloaded and any potentially incorrect changes in memory could not be discarded.  The cluster service will attempt to repair the database by retrieving it from another cluster node.  If the cluster service does not come online, restart the cluster service on this node.  If restarting the cluster service does not fix the problem, please restart the machine.  If the cluster service fails to come online after a reboot, please restore the cluster database from the last backup.  The current database was copied to '%1'.  If no backups are available, please copy '%1' to '%2' and attempt to start the cluster service.  If the cluster service then comes online on this node, some cluster configuration changes may be lost and the cluster may not function properly.  Run the Validate a Configuration wizard to check your cluster configuration and verify that the hosted Services and Applications are online and functioning correctly.

Fields #

Name	Description
`BadDatabaseFilePath` UnicodeString	—
`DatabaseFilePath` UnicodeString	—

Event ID 1594 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Cluster service successfully upgraded the cluster functional level. \n\n Functional Level: \n Upgrade Version.

Fields #

Name	Description
`FunctionalLevel` UnicodeString	—
`UpgradeLevel` UnicodeString	—

Event ID 1594 — Cluster service successfully upgraded the cluster functional level.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Cluster service successfully upgraded the cluster functional level. \n\n Functional Level: FunctionalLevel \n Upgrade Version: UpgradeLevel.

Message #

Cluster service successfully upgraded the cluster functional level.  \n\n Functional Level: %1 \n Upgrade Version: %2

Fields #

Name	Description
`FunctionalLevel` UnicodeString	—
`UpgradeLevel` UnicodeString	—

Event ID 1600 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: API

Fields #

Name	Description
`ComputerObject` UnicodeString	—

Event ID 1600 — Cluster service failed to set the permissions on the cluster computer object 'ComputerObject'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: API

Message #

Cluster service failed to set the permissions on the cluster computer object '%1'. Please contact your network administrator to check the cluster security descriptor of the computer object in Active Directory, verify that the DACL is not too big, and remove any unnecessary extra ACE(s) on the object if necessary.

Fields #

Name	Description
`ComputerObject` UnicodeString	—

Event ID 1601 — The Cluster service successfully brought the Scale-out file server clone online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Description

The Cluster service successfully brought the Scale-out file server clone online.

Message #

The Cluster service successfully brought the Scale-out file server clone online.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1602 — The Cluster service successfully brought the Scale-out file server clone offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Description

The Cluster service successfully brought the Scale-out file server clone offline.

Message #

The Cluster service successfully brought the Scale-out file server clone offline.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1603 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1603 — Cluster service failed to create a clone of the Scale Out File Server resource.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Message #

Cluster service failed to create a clone of the Scale Out File Server resource. This node will not be able to accept SMB connections to the Scale Out File Server. The error code was '0x%2'. Ensure that the Server service is running and functional on this node. Moving the Scale Out File Server resource to another node will attempt to recreate the clone.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1604 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' detected corruption for volume 'VolumeID'. Spotfix Chkdsk is required to repair problems.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—

Event ID 1604 — Cluster disk resource 'ResourceName' detected corruption for volume 'VolumeID'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' detected corruption for volume 'VolumeID'. Spotfix Chkdsk is required to repair problems.

Message #

Cluster disk resource '%1' detected corruption for volume '%2'. Spotfix Chkdsk is required to repair problems.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—

Event ID 1605 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' completed running ChkDsk.exe /spotfix on volume 'VolumeID'. The return code was 'SpotfixLogFile'. Output from the ChkDsk has been logged to file 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`SpotfixLogFile` UnicodeString	—

Event ID 1605 — Cluster disk resource 'ResourceName' completed running ChkDsk.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster disk resource 'ResourceName' completed running ChkDsk.exe /spotfix on volume 'VolumeID'. The return code was 'SpotfixLogFile'. Output from the ChkDsk has been logged to file 'Status'.

Message #

Cluster disk resource '%1' completed running ChkDsk.exe /spotfix on volume '%2'. The return code was '%4'. Output from the ChkDsk has been logged to file '%3'.
 Check the application event log for additional information from ChkDsk.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`SpotfixLogFile` UnicodeString	—

Event ID 1606 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1606 — Cluster disk resource 'ResourceName' contains a BitLocker-protected volume, 'VolumeID', but for this volume, the Active Directory cluster name account.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

Cluster disk resource '%1' contains a BitLocker-protected volume, '%2', but for this volume, the Active Directory cluster name account (also called the cluster name object or CNO) is not a BitLocker protector for the volume. This is required for BitLocker-protected volumes. To correct this, first remove the disk from the cluster. Next, use the Manage-bde.exe command-line tool to add the cluster name as an ADAccountOrGroup protector, using the format domain\ClusterName$ for the cluster name. Then add the disk back to the cluster. For more information, see the documentation for Manage-bde.exe;

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1607 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1607 — Cluster disk resource 'ResourceName' was unable to unlock the BitLocker-protected volume 'VolumeID'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Message #

Cluster disk resource '%1' was unable to unlock the BitLocker-protected volume '%2'. The cluster name object (CNO) is not set to be a valid BitLocker protector for this volume. To correct this, remove the disk from the cluster. Then use the Manage-bde.exe command-line tool to add the cluster name as an ADAccountOrGroup protector, using the format domain\ClusterName$, and add the disk back to the cluster. For more information, see the documentation for Manage-bde.exe.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1608 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Description

File Server could not start because expected dependency on 'Network Name' resource was not found or it was not configured properly. Error=0x.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1608 — File Server could not start because expected dependency on 'Network Name' resource was not found or it was not configured properly.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Description

File Server could not start because expected dependency on 'Network Name' resource was not found or it was not configured properly. Error=0xStatus.

Message #

File Server could not start because expected dependency on 'Network Name' resource was not found or it was not configured properly. Error=0x%2.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1609 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: FileServerResource

Description

Scale Out File Server could not start because expected dependency on 'Distributed Network Name' resource was not found or it was not configured properly. Error=0x.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1609 — Scale Out File Server could not start because expected dependency on 'Distributed Network Name' resource was not found or it was not configured pro...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: FileServerResource

Description

Scale Out File Server could not start because expected dependency on 'Distributed Network Name' resource was not found or it was not configured properly. Error=0xStatus.

Message #

Scale Out File Server could not start because expected dependency on 'Distributed Network Name' resource was not found or it was not configured properly. Error=0x%2.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1632 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: API

Fields #

Name	Description
`ComputerObject` UnicodeString	—
`OU1` UnicodeString	—
`OU2` UnicodeString	—

Event ID 1632 — The creation of the cluster failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: API

Message #

The creation of the cluster failed.  Unable to create the cluster name object '%1' in active directory organizational unit '%2'. The object already exists in organizational unit '%3'.  Verify that the specified distinguished name path and the cluster name object are correct.  If the distinguished name path is not specified, the existing computer object '%1' will be used.

Fields #

Name	Description
`ComputerObject` UnicodeString	—
`OU1` UnicodeString	—
`OU2` UnicodeString	—

Event ID 1633 — The Cluster service failed to bring clustered role 'ResourceGroup' completely online or offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Message #

The Cluster service failed to bring clustered role '%1' completely online or offline. One or more resources may be in a failed or an offline state. This may impact the availability of the clustered role.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1634 — Clustered service or application 'ResourceGroup' has exceeded its failover threshold.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Message #

Clustered service or application '%1' has exceeded its failover threshold.  It has exhausted the configured number of failover attempts within the failover period of time alotted to it and will be left in a failed state.  No additional attempts will be made to bring the service or application online or fail it over to another node in the cluster.  Please check the events associated with the failure.  After the issues causing the failure are resolved the service or application can be brought online manually or the cluster may attempt to bring it online again after the restart delay period.

Fields #

Name	Description
`ResourceGroup` UnicodeString	—

Event ID 1635 — Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'ResourceGroup' failed.

Message #

Cluster resource '%1' in clustered role '%2' failed.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ResourceGroup` UnicodeString	—
`ResTypeDll` UnicodeString	—

Event ID 1636 — The Cluster service has changed the password of account 'AccountName' on node 'NodeName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Description

The Cluster service has changed the password of account 'AccountName' on node 'NodeName'.

Message #

The Cluster service has changed the password of account '%1' on node '%2'.

Fields #

Name	Description
`AccountName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1637 — Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned from state FromState to state ToState.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned from state FromState to state ToState.

Message #

Cluster resource '%1' in clustered role '%2' has transitioned from state %3 to state %4.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`FromState` UnicodeString	—
`ToState` UnicodeString	—
`BlockingResources` UnicodeString	—
`FromStateValue` UnicodeString	—
`ToStateValue` UnicodeString	—
`TimeInLastState` UnicodeString	—

Event ID 1638 — Cluster resource 'ResourceName' in clustered role 'GroupName' has exceeded the maximum number of consecutive failures.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Message #

Cluster resource '%1' in clustered role '%2' has exceeded the maximum number of consecutive failures. It has exhausted the number of restart attempts within the failover period of time allotted to it and will be left in a failed state. No additional attempts will be made to bring the resource online. Check the events associated with the failure. After the issues causing the failure are resolved the resource can be brought online manually or the cluster may attempt to bring it online again after the restart delay period.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—

Event ID 1639 — Cluster resource 'ResourceName' in clustered role 'GroupName' cannot come online due to an antiaffinity conflict.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'GroupName' cannot come online due to an antiaffinity conflict.

Message #

Cluster resource '%1' in clustered role '%2' cannot come online due to an antiaffinity conflict.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—

Event ID 1640 — Clustered roles with priority less than 'BlockingPriority' are currently waiting on higher-priority roles to start.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Clustered roles with priority less than 'BlockingPriority' are currently waiting on higher-priority roles to start.

Message #

Clustered roles with priority less than '%1' are currently waiting on higher-priority roles to start.

Fields #

Name	Description
`BlockingPriority` UnicodeString	—

Event ID 1641 — Clustered role 'GroupName' is moving to cluster node 'PreviousNodeName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Clustered role 'GroupName' is moving to cluster node 'PreviousNodeName'.

Message #

Clustered role '%1' is moving to cluster node '%2'.

Fields #

Name	Description
`GroupName` UnicodeString	—
`PreviousNodeName` UnicodeString	—
`DestinationNodeName` UnicodeString	—
`MoveReason` UnicodeString	—
`SequenceNumber` UnicodeString	—

Event ID 1648 — Clustered role 'GroupName' is currently waiting for the quorum witness resource to come online before starting.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Clustered role 'GroupName' is currently waiting for the quorum witness resource to come online before starting.

Message #

Clustered role '%1' is currently waiting for the quorum witness resource to come online before starting.

Fields #

Name	Description
`GroupName` UnicodeString	—

Event ID 1649 — Cluster resource 'ResourceName' in clustered role 'GroupName' has taken more than one minute to respond to a control code.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'GroupName' has taken more than one minute to respond to a control code. The control code was 'ResourceControlCode'.

Message #

Cluster resource '%1' in clustered role '%2' has taken more than one minute to respond to a control code. The control code was '%3'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`ResourceControlCode` UnicodeString	—

Event ID 1650 — Cluster has established a UDP connection from local endpoint LocalEndpoint connected to remote endpoint RemoteEndpoint.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

Cluster has established a UDP connection from local endpoint LocalEndpoint connected to remote endpoint RemoteEndpoint.

Message #

Cluster has established a UDP connection from local endpoint %1 connected to remote endpoint %2.

Fields #

Name	Description
`LocalEndpoint` UnicodeString	—
`RemoteEndpoint` UnicodeString	—

Event ID 1651 — Cluster has received notification that Adapter AdapterName is now in a connected state.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

Cluster has received notification that Adapter AdapterName is now in a connected state.

Message #

Cluster has received notification that Adapter %1 is now in a connected state.

Fields #

Name	Description
`AdapterName` UnicodeString	—

Event ID 1652 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Description

Cluster node 'NodeName' failed to join the cluster. A TCP connection could not be established to node(s) 'RemoteNodeNames'. Verify network connectivity and configuration of any network firewalls.

Fields #

Name	Description
`NodeName` UnicodeString	—
`RemoteNodeNames` UnicodeString	—

Event ID 1652 — Cluster node 'NodeName' failed to join the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Description

Cluster node 'NodeName' failed to join the cluster. A TCP connection could not be established to node(s) 'RemoteNodeNames'. Verify network connectivity and configuration of any network firewalls.

Message #

Cluster node '%1' failed to join the cluster. A TCP connection could not be established to node(s) '%2'. Verify network connectivity and configuration of any network firewalls.

Fields #

Name	Description
`NodeName` UnicodeString	—
`RemoteNodeNames` UnicodeString	—

Event ID 1653 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Node_to_NodeCommunications

Description

Cluster node '' failed to join the cluster because it could not communicate over the network with any other node in the cluster. Verify network connectivity and configuration of any network firewalls.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1653 — Cluster node 'NodeName' failed to join the cluster because it could not communicate over the network with any other node in the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Node_to_NodeCommunications

Description

Message #

Cluster node '%1' failed to join the cluster because it could not communicate over the network with any other node in the cluster. Verify network connectivity and configuration of any network firewalls.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1654 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DisjointIPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`AdapterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1654 — Cluster Disjoint IP address resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DisjointIPAddressResource

Message #

Cluster Disjoint IP address resource '%1' failed to come online. Configuration data for the network adapter corresponding to network adapter '%2' could not be determined (error code was '%3'). Check that the IP address resource is configured with the correct address and network properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`AdapterName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1655 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DisjointIPAddressResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VSID` UnicodeString	—
`RDID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1655 — Cluster Disjoint IP address resource 'ResourceName' failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DisjointIPAddressResource

Message #

Cluster Disjoint IP address resource '%1' failed to come online. Configuration data for the network adapter corresponding to Virtual Subnet Id '%2' and Routing Domain Id '%3' could not be determined (error code was '%4'). Check that the IP address resource is configured with the correct address and network properties.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VSID` UnicodeString	—
`RDID` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1656 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DisjointIPAddressResource

Description

Failed to add the IP Address 'IPAddress' for Disjoint IP address resource 'ResourceName' (error code was 'Status'). Check for hardware or software errors related to the physical or virtual network adapters.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1656 — Failed to add the IP Address 'IPAddress' for Disjoint IP address resource 'ResourceName' (error code was 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DisjointIPAddressResource

Description

Message #

Failed to add the IP Address '%2' for Disjoint IP address resource '%1' (error code was '%3'). Check for hardware or software errors related to the physical or virtual network adapters.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1657 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DisjointIPAddressResource

Description

Health check for IP interface 'ResourceName'(address 'IPAddress') failed (status is 'Status'). Check for hardware or software errors related to the physical or virtual network adapters.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1657 — Health check for IP interface 'ResourceName'(address 'IPAddress') failed (status is 'Status').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DisjointIPAddressResource

Description

Health check for IP interface 'ResourceName'(address 'IPAddress') failed (status is 'Status'). Check for hardware or software errors related to the physical or virtual network adapters.

Message #

Health check for IP interface '%1'(address '%2') failed (status is '%3'). Check for hardware or software errors related to the physical or virtual network adapters.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`IPAddress` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1658 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: CloudWitness

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1658 — Cloud witness resource could not reach Microsoft Azure storage services.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: CloudWitness

Message #

Cloud witness resource could not reach Microsoft Azure storage services.\n\nCluster resource: %1 \nCluster node: %2 \n\nGuidance:\nThis could be due to network communication between the cluster node and the Microsoft Azure service being blocked. Verify the node's internet connectivity to Microsoft Azure. Connect to the Microsoft Azure portal and verify that the storage account exists.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 1659 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: CloudWitness

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1659 — Cloud witness resource failed to authenticate with Microsoft Azure storage services.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: CloudWitness

Message #

Cloud witness resource failed to authenticate with Microsoft Azure storage services. An access denied error was returned while attempting to contact the Microsoft Azure storage account. \n\nCluster resource: %1 \n\nGuidance:\n The storage account's access key may no longer be valid. Use the Configure Cluster Quorum Wizard in the Failover Cluster Manager or the Set-ClusterQuorum Windows PowerShell cmdlet, to configure the Cloud witness resource with the updated storage account access key.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—

Event ID 1664 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Event ID 1664 — Upgrading the functional level of the cluster failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Upgrading the functional level of the cluster failed. Check that all nodes of the cluster are currently running and are the same version of Windows Server, then run the Update-ClusterFunctionalLevel Windows PowerShell cmdlet again.

Event ID 1665 — Online operation for the Physical Disk resource 'ResourceName' is started.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Online operation for the Physical Disk resource 'ResourceName' is started.

Message #

Online operation for the Physical Disk resource '%1' is started.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1666 — Online operation for the Physical Disk resource 'ResourceName' is completed with status 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Online operation for the Physical Disk resource 'ResourceName' is completed with status 'Status'.

Message #

Online operation for the Physical Disk resource '%1' is completed with status '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1667 — Offline operation for the Physical Disk resource 'ResourceName' is started.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Offline operation for the Physical Disk resource 'ResourceName' is started.

Message #

Offline operation for the Physical Disk resource '%1' is started.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1668 — Offline operation for the Physical Disk resource 'ResourceName' is completed with status 'Status'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Offline operation for the Physical Disk resource 'ResourceName' is completed with status 'Status'.

Message #

Offline operation for the Physical Disk resource '%1' is completed with status '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1669 — Cluster physical disk resource took longer than expected to reach an online state.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource took longer than expected to reach an online state.

Message #

Cluster physical disk resource took longer than expected to reach an online state.

Physical Disk resource name: %1

Guidance:
During the Online Pending phase the Physical Disk resource will wait for dependent components to be ready for the volumes to be mounted. Delays can occur when using replicated volumes if there is a large amount of data that needs to be replicated before the volume is ready to be mounted. The Cluster Service will wait for Storage Replication to respond that it is ready. Review the Storage Replication events for additional information on what operations are taking additional time to complete.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1670 — Cluster physical disk resource successfully brought the resource online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource successfully brought the resource online.

Message #

Cluster physical disk resource successfully brought the resource online.

Physical Disk resource name: %1
Time Elapsed (seconds): %3

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`TimeElapsedSeconds` UnicodeString	—

Event ID 1671 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource cannot be brought online.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`TimeElapsedSeconds` UnicodeString	—

Event ID 1671 — Cluster physical disk resource cannot be brought online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster physical disk resource cannot be brought online.

Message #

Cluster physical disk resource cannot be brought online.

Physical Disk resource name: %1
Error Code: %2
Time Elapsed (seconds): %3

Guidance:
Run the Validate a Configuration wizard to check your storage configuration. If the error code was ERROR_CLUSTER_SHUTDOWN then the Online Pending state was cancelled by an administrator. If this is a replicated volume then this could be the result of a failure to set the disk attributes.  Review the Storage Replication events for additional information.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`TimeElapsedSeconds` UnicodeString	—

Event ID 1672 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Fields #

Name	Description
`NodeName` UnicodeString	—
`UngracefulShutdownThreshold` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1672 — Cluster node 'NodeName' has been quarantined.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

Cluster node '%1' has been quarantined.  The node experienced '%2' consecutive failures within a short amount of time and has been removed from the cluster to avoid further disruptions. The node will be quarantined until '%3' and then the node will automatically attempt to re-join the cluster.

Refer to the System and Application event logs to determine the issues on this node.  When the issue is resolved, quarantine can be manually cleared to allow the node to rejoin with the 'Start-ClusterNode ?ClearQuarantine' Windows PowerShell cmdlet.

Node Name : %1
Number of consecutive cluster membership loses: %2
Time quarantine will be automatically cleared: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`UngracefulShutdownThreshold` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1673 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster node 'ResourceName' has entered the isolated state.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`PreviousGroup` UnicodeString	—
`PreviousGroupOwnerNode` UnicodeString	—
`NewGroup` UnicodeString	—
`NewGroupOwnerNode` UnicodeString	—

Event ID 1673 — Cluster node 'ResourceName' has entered the isolated state.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Cluster node 'ResourceName' has entered the isolated state.

Message #

Cluster node '%1' has entered the isolated state.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`PreviousGroup` UnicodeString	—
`PreviousGroupOwnerNode` UnicodeString	—
`NewGroup` UnicodeString	—
`NewGroupOwnerNode` UnicodeString	—

Event ID 1674 — Group 'GroupName' has transitioned from state 'FromState' to state 'ToState'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Group 'GroupName' has transitioned from state 'FromState' to state 'ToState'.

Message #

Group '%1' has transitioned from state '%2' to state '%3'.

Fields #

Name	Description
`GroupName` UnicodeString	—
`FromState` UnicodeString	—
`ToState` UnicodeString	—

Event ID 1675 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Cluster node 'NodeName' has been quarantined by 'QuarantineType' and cannot join the cluster. The node will be quarantined until 'QuarantineExpiryTime' and then the node will automatically attempt to re-join the cluster.

Fields #

Name	Description
`NodeName` UnicodeString	—
`QuarantineType` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1675 — Cluster node 'NodeName' has been quarantined by 'QuarantineType' and cannot join the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Message #

Cluster node '%1' has been quarantined by '%2' and cannot join the cluster. The node will be quarantined until '%3' and then the node will automatically attempt to re-join the cluster. 

Refer to the System and Application event logs to determine the issues on this node.  When the issue is resolved, quarantine can be manually cleared to allow the node to rejoin with the 'Start-ClusterNode ?ClearQuarantine' Windows PowerShell cmdlet.

Node Name : %1
QuarantineType : Quarantine by %2
Time quarantine will be automatically cleared: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`QuarantineType` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1676 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Local cluster node has been quarantined by 'QuarantineType'. The node will be quarantined until 'QuarantineExpiryTime' and then the node will automatically attempt to re-join the cluster.

Fields #

Name	Description
`QuarantineType` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1676 — Local cluster node has been quarantined by 'QuarantineType'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Local cluster node has been quarantined by 'QuarantineType'. The node will be quarantined until 'QuarantineExpiryTime' and then the node will automatically attempt to re-join the cluster.

Message #

Local cluster node has been quarantined by '%1'. The node will be quarantined until '%2' and then the node will automatically attempt to re-join the cluster. 

Refer to the System and Application event logs to determine the issues on this node.  When the issue is resolved, quarantine can be manually cleared to allow the node to rejoin with the 'Start-ClusterNode ?ClearQuarantine' Windows PowerShell cmdlet.

QuarantineType : Quarantined by %1
Time quarantine will be automatically cleared: %2

Fields #

Name	Description
`QuarantineType` UnicodeString	—
`QuarantineExpiryTime` UnicodeString	—

Event ID 1677 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node drain failed on Cluster node .

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1677 — Node drain failed on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Node drain failed on Cluster node NodeName.

Message #

Node drain failed on Cluster node %1. 

Reference the node's System and Application event logs and cluster logs to investigate the cause of the drain failure.  When the problem is resolved, you can retry the drain operation.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1680 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Description

Cluster node 'NodeName' has exited the isolated state.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1680 — Cluster node 'NodeName' has exited the isolated state.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Description

Cluster node 'NodeName' has exited the isolated state.

Message #

Cluster node '%1' has exited the isolated state.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1681 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`NodeName` UnicodeString	—
`GroupList` UnicodeString	—

Event ID 1681 — Virtual machines on node 'NodeName' have entered an unmonitored state.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

Virtual machines on node '%1' have entered an unmonitored state. The virtual machines health will be monitored again once the node returns from an isolated state or may failover if the node does not return. The virtual machine no longer being monitored are: %2.

Fields #

Name	Description
`NodeName` UnicodeString	—
`GroupList` UnicodeString	—

Event ID 1682 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Virtual machine 'GroupList' which was unmonitored on the isolated node 'NodeName' has been failed over to another node. The health of the virtual machine is once again being monitored.

Fields #

Name	Description
`NodeName` UnicodeString	—
`GroupList` UnicodeString	—

Event ID 1682 — Virtual machine 'GroupList' which was unmonitored on the isolated node 'NodeName' has been failed over to another node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Virtual machine 'GroupList' which was unmonitored on the isolated node 'NodeName' has been failed over to another node. The health of the virtual machine is once again being monitored.

Message #

Virtual machine '%2' which was unmonitored on the isolated node '%1' has been failed over to another node. The health of the virtual machine is once again being monitored.

Fields #

Name	Description
`NodeName` UnicodeString	—
`GroupList` UnicodeString	—

Event ID 1683 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

The cluster service was unable to reach any available domain controller on the domain. This may impact functionality that is dependent on Cluster network name authentication.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainController` UnicodeString	—

Event ID 1683 — The cluster service was unable to reach any available domain controller on the domain.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

The cluster service was unable to reach any available domain controller on the domain. This may impact functionality that is dependent on Cluster network name authentication.

Message #

The cluster service was unable to reach any available domain controller on the domain. This may impact functionality that is dependent on Cluster network name authentication.

DC Server: %1 

Guidance:
 Verify that domain controllers are accessible on the network to the cluster nodes.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DomainController` UnicodeString	—

Event ID 1684 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1684 — Cluster network name resource failed to find the associated computer object in Active Directory.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Message #

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Network Name: %1
Organizational Unit: %2

Guidance:

Restore the computer object for the network name from the Active Directory recycle bin. Alternately, offline the cluster network name resource and run the Repair action to recreate the computer object in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1685 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1685 — Cluster network name resource failed to find the associated computer object in Active Directory.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Message #

Cluster network name resource failed to find the associated computer object in Active Directory. This may impact functionality that is dependent on Cluster network name authentication.

Network Name: %1
Organizational Unit: %2

Guidance:

Restore the computer object for the network name from the Active Directory recycle bin.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1686 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1686 — Cluster network name resource found the associated computer object in Active Directory to be disabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Message #

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Network Name: %1
Organizational Unit: %2

Guidance:

Enable the computer object for the network name in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1687 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Description

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1687 — Cluster network name resource found the associated computer object in Active Directory to be disabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Description

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Message #

Cluster network name resource found the associated computer object in Active Directory to be disabled. This may impact functionality that is dependent on Cluster network name authentication.

Network Name: %1
Organizational Unit: %2

Guidance:

Enable the computer object for the network name in Active Directory. Alternately, offline the cluster network name resource and run the Repair action to enable the computer object in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—

Event ID 1688 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkNameResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1688 — Cluster network name resource detected that the associated computer object in Active Directory was disabled and failed in its attempt to enable it.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NetworkNameResource

Message #

Cluster network name resource detected that the associated computer object in Active Directory was disabled and failed in its attempt to enable it. This may impact functionality that is dependent on Cluster network name authentication.

Network Name: %1
Organizational Unit: %2

Guidance:

Enable the computer object for the network name in Active Directory.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OrganizationalUnit` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1689 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: DisableService

Description

The cluster service detected a service which is not compatible with Failover Clustering. The service has been disabled to avoid possible problems with the Failover Cluster.

Fields #

Name	Description
`ServiceName` UnicodeString	—

Event ID 1689 — The cluster service detected a service which is not compatible with Failover Clustering.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: DisableService

Description

The cluster service detected a service which is not compatible with Failover Clustering. The service has been disabled to avoid possible problems with the Failover Cluster.

Message #

The cluster service detected a service which is not compatible with Failover Clustering. The service has been disabled to avoid possible problems with the Failover Cluster.

Service name: '%1'

Fields #

Name	Description
`ServiceName` UnicodeString	—

Event ID 1690 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Fields #

Name	Description
`GroupName` UnicodeString	—

Event ID 1690 — The cluster role was not brought online automatically because IgnorePersistentStateOnStartup is enabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Message #

The cluster role was not brought online automatically because IgnorePersistentStateOnStartup is enabled. This parameter is used for troubleshooting Cluster Service startup issues and prevents cluster roles from coming online automatically. 

 Role: %1 

 Guidance:
Once the troubleshooting is complete, this parameter can be disabled to allow roles to online automatically by using the following Windows PowerShell cmdlet: (Get-Cluster).IgnorePersistentStateOnStartup = 0

Fields #

Name	Description
`GroupName` UnicodeString	—

Event ID 1691 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Event ID 1691 — The cluster service started with the IgnorePersistentStateOnStartup parameter enabled.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

The cluster service started with the IgnorePersistentStateOnStartup parameter enabled. This parameter is used for troubleshooting Cluster Service startup issues and prevents cluster roles from coming online automatically. 

Guidance:
Once the troubleshooting is complete, this parameter can be disabled to allow roles to online automatically by using the following Windows PowerShell cmdlet: (Get-Cluster).IgnorePersistentStateOnStartup = 0

Event ID 1792 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed periodic health check.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1792 — Cluster physical disk resource failed periodic health check.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed periodic health check.

Message #

Cluster physical disk resource failed periodic health check. 

 Physical Disk resource name: %1 
 Device Number: %2 
 Device Guid: %3 
  Error Code: %4 
 Reason: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1793 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed to come online.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1793 — Cluster physical disk resource failed to come online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed to come online.

Message #

Cluster physical disk resource failed to come online.

Resource Name: %1
Device Number: %2
Device Guid: %3
Error Code: %4
Reason: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1794 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed to go offline.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1794 — Cluster physical disk resource failed to go offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster physical disk resource failed to go offline.

Message #

Cluster physical disk resource failed to go offline.

Physical Disk Resource Name: %1
Device Number: %2
Device Guid: %3
Error Code: %4
Additional reason: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1795 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster physical disk resource encountered an error while attempting to terminate.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1795 — Cluster physical disk resource encountered an error while attempting to terminate.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: PhysicalDiskResource

Description

Cluster physical disk resource encountered an error while attempting to terminate.

Message #

Cluster physical disk resource encountered an error while attempting to terminate.

Phsyical Disk Resource Name: %1
Device Number: %2
Device Guid: %3
Error Code: %4
Reason: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`DeviceNumber` UnicodeString	—
`DeviceGuid` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonMessage` UnicodeString	—

Event ID 1808 — The cluster load balancer has identified the current node is exceeding the CPU or memory usage threshold.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterAutoBalancer

Description

The cluster load balancer has identified the current node is exceeding the CPU or memory usage threshold. Virtual Machines will be moved to a new node to balance the cluster.

Message #

The cluster load balancer has identified the current node is exceeding the CPU or memory usage threshold.  Virtual Machines will be moved to a new node to balance the cluster. 

 Current Node: %1 
 Virtual Machines: %2 
 New Node: %3

Fields #

Name	Description
`FromNodeName` UnicodeString	—
`GroupName` UnicodeString	—
`ToNodeName` UnicodeString	—

Event ID 1809 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

This node has been joined to a cluster that has Storage Spaces Direct enabled, which is not validated on the current build. The node will be quarantined.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1809 — This node has been joined to a cluster that has Storage Spaces Direct enabled, which is not validated on the current build.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

This node has been joined to a cluster that has Storage Spaces Direct enabled, which is not validated on the current build. The node will be quarantined.

Message #

This node has been joined to a cluster that has Storage Spaces Direct enabled, which is not validated on the current build. The node will be quarantined.

Microsoft recommends deploying SDDC on WSSD [https://www.microsoft.com/en-us/cloud-platform/software-defined-datacenter] certified hardware offerings for production environments. The WSSD offerings will be pre-validated on Windows Server 2019 in the coming months. In the meantime, we are making the SDDC bits available early to Windows Server 2019 Insiders to allow for testing and evaluation in preparation for WSSD certified hardware becoming available.

Customers interested in upgrading existing WSSD environments to Windows Server 2019 should contact Microsoft for recommendations on how to proceed. Please call Microsoft support [https://support.microsoft.com/en-us/help/4051701/global-customer-service-phone-numbers].

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1810 — Cluster Physical Disk Resource added a protector to a BitLocker encrypted volume.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource added a protector to a BitLocker encrypted volume.

Message #

Cluster Physical Disk Resource added a protector to a BitLocker encrypted volume. 

ResourceName: %1
Volume: %2
ProtectorType: %3
ProtectorId: %4
TimeInMilliseconds: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Volume` UnicodeString	—
`ProtectorType` UnicodeString	—
`ProtectorId` UnicodeString	—
`TimeInMilliseconds` UnicodeString	—

Event ID 1811 — Cluster Physical Disk Resource failed to add a protector to a BitLocker encrypted volume.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource failed to add a protector to a BitLocker encrypted volume.

Message #

Cluster Physical Disk Resource failed to add a protector to a BitLocker encrypted volume. 

ResourceName: %1
Volume: %2
ProtectorType: %3
TimeInMilliseconds: %4
Status: %5

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Volume` UnicodeString	—
`ProtectorType` UnicodeString	—
`TimeInMilliseconds` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1812 — Cluster Physical Disk Resource completed a storage operation.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource completed a storage operation.

Message #

Cluster Physical Disk Resource completed a storage operation. 

ResourceName: %1
Device: %2
Operation: %3
TimeInMilliseconds: %4
Status: %5
AdditionalInformation: %6

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Device` UnicodeString	—
`Operation` UnicodeString	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`TimeInMilliseconds` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference
`AdditionalInformation` UnicodeString	—

Event ID 1813 — Cluster Physical Disk Resource completed resource online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource completed resource online.

Message #

Cluster Physical Disk Resource completed resource online.

ResourceName: %1
OperationTimes: %2
TotalTimeInMilliseconds: %3
Status: %4

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OperationTimes` UnicodeString	—
`TotalTimeInMilliseconds` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1814 — Cluster Physical Disk Resource completed resource offline.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource completed resource offline.

Message #

Cluster Physical Disk Resource completed resource offline.

ResourceName: %1
OperationTimes: %2
TotalTimeInMilliseconds: %3
Status: %4

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OperationTimes` UnicodeString	—
`TotalTimeInMilliseconds` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1815 — Cluster Physical Disk Resource completed resource terminate.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource completed resource terminate.

Message #

Cluster Physical Disk Resource completed resource terminate.

ResourceName: %1
OperationTimes: %2
TotalTimeInMilliseconds: %3
Status: %4

Fields #

Name	Description
`ResourceName` UnicodeString	—
`OperationTimes` UnicodeString	—
`TotalTimeInMilliseconds` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 1816 — Cluster Physical Disk Resource could not find expected number of usable data volumes during online.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource could not find expected number of usable data volumes during online.

Message #

Cluster Physical Disk Resource could not find expected number of usable data volumes during online.

ResourceName: %1
Device: %2
VolumesExpected: %3
VolumesFound: %4

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Device` UnicodeString	—
`VolumesExpected` UnicodeString	—
`VolumesFound` UnicodeString	—

Event ID 1817 — Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned to an online state after failure.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster resource 'ResourceName' in clustered role 'GroupName' has transitioned to an online state after failure. TimeSinceFailure millisecond(s) have elapsed since the resource failed.

Message #

Cluster resource '%1' in clustered role '%2' has transitioned to an online state after failure. %3 millisecond(s) have elapsed since the resource failed.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`TimeSinceFailure` UnicodeString	—

Event ID 1824 — Cluster Physical Disk Resource contains a BitLocker protected volume, but the system volume is not BitLocker protected.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Message #

Cluster Physical Disk Resource contains a BitLocker protected volume, but the system volume is not BitLocker protected. For data protection, it is recommended that the system volume be BitLocker protected as well.

ResourceName: %1

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 1825 — Cluster Physical Disk Resource saved a protector to a BitLocker encrypted volume.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: PhysicalDiskResource

Description

Cluster Physical Disk Resource saved a protector to a BitLocker encrypted volume.

Message #

Cluster Physical Disk Resource saved a protector to a BitLocker encrypted volume. 

ResourceName: %1
Volume: %2
ProtectorType: %3
ProtectorId: %4

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Volume` UnicodeString	—
`ProtectorType` UnicodeString	—
`ProtectorId` UnicodeString	—

Event ID 1826 — Node drain failed on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node drain failed on Cluster node NodeName.

Message #

Node drain failed on Cluster node %1. 

Reference the node's System and Application event logs and cluster logs to investigate the cause of the drain failure.  When the problem is resolved, you can retry the drain operation.

Fields #

Name	Description
`NodeName` UnicodeString	—
`Reason` UnicodeString	—

Event ID 1827 — Node drain succeeded on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node drain succeeded on Cluster node NodeName.

Message #

Node drain succeeded on Cluster node %1.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1828 — Node drain started on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node drain started on Cluster node NodeName.

Message #

Node drain started on Cluster node %1.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1829 — Node drain started second attempt on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node drain started second attempt on Cluster node NodeName.

Message #

Node drain started second attempt on Cluster node %1.

Fields #

Name	Description
`NodeName` UnicodeString	—

Event ID 1830 — Node failback failed on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node failback failed on Cluster node NodeName. Groups: ExtraInfo.

Message #

Node failback failed on Cluster node %1. Groups: %2. 

Reference the node's System and Application event logs and cluster logs to investigate the cause of the drain failure.  When the problem is resolved, you can retry the drain operation.

Fields #

Name	Description
`NodeName` UnicodeString	—
`ExtraInfo` UnicodeString	—

Event ID 1831 — Node failback succeeded on Cluster node NodeName after being called from Origin.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node failback succeeded on Cluster node NodeName after being called from Origin.

Message #

Node failback succeeded on Cluster node %1 after being called from %2

Fields #

Name	Description
`NodeName` UnicodeString	—
`Origin` UnicodeString	—

Event ID 1832 — Node Resume started on Cluster node NodeName.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node Resume started on Cluster node NodeName.

Message #

Node Resume started on Cluster node %1.

Fields #

Name	Description
`NodeName` UnicodeString	—
`Origin` UnicodeString	—

Event ID 1833 — Node failback started on Cluster node NodeName due to being called from Origin.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node failback started on Cluster node NodeName due to being called from Origin.

Message #

Node failback started on Cluster node %1 due to being called from %2

Fields #

Name	Description
`NodeName` UnicodeString	—
`Origin` UnicodeString	—

Event ID 1840 — Node Failback did not run on Cluster node NodeName after being called from Origin.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node Failback did not run on Cluster node NodeName after being called from Origin. Reason: Reason.

Message #

Node Failback did not run on Cluster node %1 after being called from %2. Reason: %3

Fields #

Name	Description
`NodeName` UnicodeString	—
`Origin` UnicodeString	—
`Reason` UnicodeString	—

Event ID 1841 — Node resume succeeded on Cluster node NodeName after being called from Origin.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Node resume succeeded on Cluster node NodeName after being called from Origin.

Message #

Node resume succeeded on Cluster node %1 after being called from %2

Fields #

Name	Description
`NodeName` UnicodeString	—
`Origin` UnicodeString	—

Event ID 2049 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2049 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2050 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2050 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2051 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2051 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2052 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 2052 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 4096 — [NETFTAPI] received Notification for Address (State).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received Notification for Address (State).

Message #

[NETFTAPI] received %1 for %2 (%3)

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`State` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4096 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received for ().

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`State` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4097 — [NETFTAPI] received Notification for Address (State).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received Notification for Address (State).

Message #

[NETFTAPI] received %1 for %2 (%3)

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`State` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4097 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received for ().

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`State` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4098 — [NETFTAPI] received Notification for Address.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received Notification for Address.

Message #

[NETFTAPI] received %1 for %2

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4098 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received for.

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4099 — [NETFTAPI] received Notification for Address.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received Notification for Address.

Message #

[NETFTAPI] received %1 for %2

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`LogTime` SYSTEMTIME	—

Event ID 4099 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received for.

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`LogTime` SYSTEMTIME	—

Event ID 4100 — [NETFTAPI] received Notification.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received Notification.

Message #

[NETFTAPI] received %1

Fields #

Name	Description
`Notification` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4100 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] received.

Fields #

Name	Description
`Notification` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4101 — [NETFTAPI] Signaled Notification event for Address.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled Notification event for Address.

Message #

[NETFTAPI] Signaled %1 event for %2

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4101 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled event for.

Fields #

Name	Description
`Notification` UInt32	—
`Address` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4102 — [NETFTAPI] Signaled Notification event for Address.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled Notification event for Address.

Message #

[NETFTAPI] Signaled %1 event for %2

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`LogTime` SYSTEMTIME	—

Event ID 4102 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled event for.

Fields #

Name	Description
`Notification` UInt32	—
`Address` Binary	—
`LogTime` SYSTEMTIME	—

Event ID 4103 — [NETFTAPI] Signaled Notification event, local address LocalAddress:LocalPort remote address RemoteAddress:RemotePort.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled Notification event, local address LocalAddress:LocalPort remote address RemoteAddress:RemotePort.

Message #

[NETFTAPI] Signaled %1 event, local address %2:%3 remote address %4:%5

Fields #

Name	Description
`Notification` UInt32	—
`LocalAddress` UInt32	—
`LocalPort` UInt16	—
`RemoteAddress` UInt32	—
`RemotePort` UInt16	—
`LogTime` SYSTEMTIME	—

Event ID 4103 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled event, local address : remote address.

Fields #

Name	Description
`Notification` UInt32	—
`LocalAddress` UInt32	—
`LocalPort` UInt16	—
`RemoteAddress` UInt32	—
`RemotePort` UInt16	—
`LogTime` SYSTEMTIME	—

Event ID 4104 — [NETFTAPI] Signaled Notification event, local address [LocalAddress]:LocalPort remote address [RemoteAddress]:RemotePort.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled Notification event, local address [LocalAddress]:LocalPort remote address [RemoteAddress]:RemotePort.

Message #

[NETFTAPI] Signaled %1 event, local address [%2]:%3 remote address [%4]:%5

Fields #

Name	Description
`Notification` UInt32	—
`LocalAddress` Binary	—
`LocalPort` UInt16	—
`RemoteAddress` Binary	—
`RemotePort` UInt16	—
`LogTime` SYSTEMTIME	—

Event ID 4104 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled event, local address []: remote address [].

Fields #

Name	Description
`Notification` UInt32	—
`LocalAddress` Binary	—
`LocalPort` UInt16	—
`RemoteAddress` Binary	—
`RemotePort` UInt16	—
`LogTime` SYSTEMTIME	—

Event ID 4105 — [NETFTAPI] Signaled Notification event, alias Alias.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled Notification event, alias Alias.

Message #

[NETFTAPI] Signaled %1 event, alias %2

Fields #

Name	Description
`Notification` UInt32	—
`Alias` UnicodeString	—
`LogTime` SYSTEMTIME	—

Event ID 4105 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Signaled event, alias.

Fields #

Name	Description
`Notification` UInt32	—
`Alias` UnicodeString	—
`LogTime` SYSTEMTIME	—

Event ID 4106 — [NETFTAPI] Failed to allocate Address network address entry (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate Address network address entry (status Status).

Message #

[NETFTAPI] Failed to allocate %1 network address entry (status %2)

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4106 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate network address entry (status ).

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4107 — [NETFTAPI] Failed to allocate Address network address entry (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate Address network address entry (status Status).

Message #

[NETFTAPI] Failed to allocate %1 network address entry (status %2)

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4107 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate network address entry (status ).

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4108 — [NETFTAPI] Failed to query initialization parameters for Address (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query initialization parameters for Address (status Status).

Message #

[NETFTAPI] Failed to query initialization parameters for %1 (status %2)

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4108 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query initialization parameters for (status ).

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4109 — [NETFTAPI] Failed to query initialization parameters for Address (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query initialization parameters for Address (status Status).

Message #

[NETFTAPI] Failed to query initialization parameters for %1 (status %2)

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4109 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query initialization parameters for (status ).

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4110 — [NETFTAPI] Failed to query parameters for Address (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query parameters for Address (status Status).

Message #

[NETFTAPI] Failed to query parameters for %1 (status %2)

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4110 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query parameters for (status ).

Fields #

Name	Description
`Address` UInt32	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4111 — [NETFTAPI] Failed to query parameters for Address (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query parameters for Address (status Status).

Message #

[NETFTAPI] Failed to query parameters for %1 (status %2)

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4111 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to query parameters for (status ).

Fields #

Name	Description
`Address` Binary	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4112 — [NETFTAPI] Subscriber thrown exception Status processing NETFT notification.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Subscriber thrown exception Status processing NETFT notification.

Message #

[NETFTAPI] Subscriber thrown exception %1 processing NETFT notification

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4112 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Subscriber thrown exception processing NETFT notification.

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4113 — [NETFTAPI] Failed to allocate Interface network interface entry (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate Interface network interface entry (status Status).

Message #

[NETFTAPI] Failed to allocate %1 network interface entry (status %2)

Fields #

Name	Description
`Interface` UInt64	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4113 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Failed to allocate network interface entry (status ).

Fields #

Name	Description
`Interface` UInt64	—
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4114 — [NETFTAPI] The IPv4/802 provider is not present

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The IPv4/802 provider is not present.

Message #

[NETFTAPI] The IPv4/802 provider is not present

Event ID 4114 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The IPv4/802 provider is not present.

Event ID 4115 — [NETFTAPI] The IPv6/802 provider is not present

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The IPv6/802 provider is not present.

Message #

[NETFTAPI] The IPv6/802 provider is not present

Event ID 4115 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The IPv6/802 provider is not present.

Event ID 4116 — [NETFTAPI] Event processing thread failed to register for NETFT event (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Event processing thread failed to register for NETFT event (status Status).

Message #

[NETFTAPI] Event processing thread failed to register for NETFT event (status %1)

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4116 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Event processing thread failed to register for NETFT event (status ).

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4117 — [NETFTAPI] Event processing thread completed processing loop (status Status).

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Event processing thread completed processing loop (status Status).

Message #

[NETFTAPI] Event processing thread completed processing loop (status %1)

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4117 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] Event processing thread completed processing loop (status ).

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference
`LogTime` SYSTEMTIME	—

Event ID 4118 — [NETFTAPI] The watchdog miniport is halting.

Provider: Microsoft-Windows-FailoverClustering
Channel: Diagnostic
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The watchdog miniport is halting.

Message #

[NETFTAPI] The watchdog miniport is halting.

Fields #

Name	Description
`Notification` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4118 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

[NETFTAPI] The watchdog miniport is halting.

Fields #

Name	Description
`Notification` UInt32	—
`LogTime` SYSTEMTIME	—

Event ID 4608 — The list of clustered disks has been retrieved during cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

The list of clustered disks has been retrieved during cluster node cleanup.

Message #

The list of clustered disks has been retrieved during cluster node cleanup.

Event ID 4609 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4609 — Cluster service failed to retrieve the list of clustered disks while destroying the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Cluster service failed to retrieve the list of clustered disks while destroying the cluster. The error code was '%1'. If these disks are not accessible, execute the 'Clear-ClusterDiskReservation' PowerShell cmdlet.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4610 — Clustered disks have been released by the Partition Manager while destroying the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Message #

Clustered disks have been released by the Partition Manager while destroying the cluster. These disks will be left in an offline state. For these released disks to be accessible, please bring them online on a single machine only, using the Disk Management utility.

Event ID 4611 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`DiskId` UnicodeString	—

Event ID 4611 — Clustered disk with ID 'DiskId' was not released by the Partition Manager while destroying the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Clustered disk with ID '%2' was not released by the Partition Manager while destroying the cluster. The error code was '%1'. Restarting the machine will ensure the disk is released by the Partition Manager.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`DiskId` UnicodeString	—

Event ID 4612 — The clustered disks database has been cleared as part of cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

The clustered disks database has been cleared as part of cluster node cleanup.

Message #

The clustered disks database has been cleared as part of cluster node cleanup.

Event ID 4613 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`DiskId` UnicodeString	—

Event ID 4613 — The cluster service failed to properly cleanup a clustered disk with ID 'DiskId' while destroying the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

The cluster service failed to properly cleanup a clustered disk with ID '%2' while destroying the cluster. The error code was '%1'. You may unable to access this disk until cleanup has been successfully completed. For manual cleanup, delete the 'AttachedDisks' value of the 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClusDisk\Parameters' key in the Windows registry.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`DiskId` UnicodeString	—

Event ID 4614 — The cluster service has been stopped and set as disabled as part of cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

The cluster service has been stopped and set as disabled as part of cluster node cleanup.

Message #

The cluster service has been stopped and set as disabled as part of cluster node cleanup.

Event ID 4615 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4615 — Disabling the cluster service during cluster node cleanup, has failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Disabling the cluster service during cluster node cleanup, has failed. The error code was '%1'. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. For manual cleanup, execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4616 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

Termination of the cluster service during cluster node cleanup has not completed within the expected time period. Please restart this machine to ensure the cluster service is no longer running.

Event ID 4616 — Termination of the cluster service during cluster node cleanup has not completed within the expected time period.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Description

Termination of the cluster service during cluster node cleanup has not completed within the expected time period. Please restart this machine to ensure the cluster service is no longer running.

Message #

Termination of the cluster service during cluster node cleanup has not completed within the expected time period. Please restart this machine to ensure the cluster service is no longer running.

Event ID 4617 — The cluster service registry entries on this machine have been reset as part of cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

The cluster service registry entries on this machine have been reset as part of cluster node cleanup.

Message #

The cluster service registry entries on this machine have been reset as part of cluster node cleanup.

Event ID 4618 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4618 — Resetting cluster service registry entries during cluster node cleanup failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Resetting cluster service registry entries during cluster node cleanup failed. The error code was '%1'. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. For manual cleanup, execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4619 — The cluster Windows registry hive has been unloaded.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

The cluster Windows registry hive has been unloaded.

Message #

The cluster Windows registry hive has been unloaded.

Event ID 4620 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4620 — Unloading the cluster service registry hive during cluster node cleanup failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Unloading the cluster service registry hive during cluster node cleanup failed. The error code was '%1'. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. For manual cleanup, execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4621 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

This node was sucessfully removed from the cluster.

Event ID 4621 — This node was sucessfully removed from the cluster.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Description

This node was sucessfully removed from the cluster.

Message #

This node was sucessfully removed from the cluster.

Event ID 4622 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Event ID 4622 — The Cluster service encountered an error during node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

The Cluster service encountered an error during node cleanup. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. Use the 'Clear-ClusterNode' PowerShell cmdlet on this node.

Event ID 4623 — The IPSec security association timeout has been reset on this machine as part of cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Message #

The IPSec security association timeout has been reset on this machine as part of cluster node cleanup. This restores the IPSec security association timeout to the default policy for non-clustered machines.

Event ID 4624 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`RegValue1` UnicodeString	—
`RegValue2` UnicodeString	—

Event ID 4624 — Resetting the IPSec security association timeout registry value failed during cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Resetting the IPSec security association timeout registry value failed during cluster node cleanup. The error code was '%1'. For manual cleanup, execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine. Alternatively, you may reset the IPSec security association timeout by deleting the '%2' value and the '%3' value from HKEY_LOCAL_MACHINE in the Windows registry.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference
`RegValue1` UnicodeString	—
`RegValue2` UnicodeString	—

Event ID 4625 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Fields #

Name	Description
`RegValue1` UnicodeString	—
`RegValue2` UnicodeString	—

Event ID 4625 — Resetting the IPSec security association timeout registry value failed during cluster node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Message #

Resetting the IPSec security association timeout registry value failed during cluster node cleanup. This is because the IPSec security association timeout was modified after this machine was configured to be a member of a cluster. For manual cleanup, execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine. Alternatively, you may reset the IPSec security association timeout by deleting the '%1' value and the '%2' value from HKEY_LOCAL_MACHINE in the Windows registry.

Fields #

Name	Description
`RegValue1` UnicodeString	—
`RegValue2` UnicodeString	—

Event ID 4626 — All clustered tasks on this node have been deleted as part of node cleanup.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

All clustered tasks on this node have been deleted as part of node cleanup.

Message #

All clustered tasks on this node have been deleted as part of node cleanup.

Event ID 4627 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

Deletion of clustered tasks during node cleanup failed. The error code was 'Status'. Use Windows Task Scheduler to delete any remaining clustered tasks.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4627 — Deletion of clustered tasks during node cleanup failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Description

Deletion of clustered tasks during node cleanup failed. The error code was 'Status'. Use Windows Task Scheduler to delete any remaining clustered tasks.

Message #

Deletion of clustered tasks during node cleanup failed. The error code was '%1'. Use Windows Task Scheduler to delete any remaining clustered tasks.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4628 — During node cleanup, the local user account that is managed by the cluster was deleted.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

During node cleanup, the local user account that is managed by the cluster was deleted.

Message #

During node cleanup, the local user account that is managed by the cluster was deleted.

Event ID 4629 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterEvict/DestroyCleanup

Description

During node cleanup, the local user account that is managed by the cluster was not deleted. The error code was 'Status'. Open Local Users and Groups (lusrmgr.msc) to delete the account.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4629 — During node cleanup, the local user account that is managed by the cluster was not deleted.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterEvict/DestroyCleanup

Description

During node cleanup, the local user account that is managed by the cluster was not deleted. The error code was 'Status'. Open Local Users and Groups (lusrmgr.msc) to delete the account.

Message #

During node cleanup, the local user account that is managed by the cluster was not deleted.  The error code was '%1'. Open Local Users and Groups (lusrmgr.msc) to delete the account.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 4864 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: VolumeSnapshotServiceResource

Description

Volume shadow copy service task resource 'ResourceName' creation failed. The error code was 'Status'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4864 — Volume shadow copy service task resource 'ResourceName' creation failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: VolumeSnapshotServiceResource

Description

Volume shadow copy service task resource 'ResourceName' creation failed. The error code was 'Status'.

Message #

Volume shadow copy service task resource '%1' creation failed. The error code was '%2'.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4865 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: VolumeSnapshotServiceResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4865 — Volume shadow copy service task resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: VolumeSnapshotServiceResource

Message #

Volume shadow copy service task resource '%1' failed. The error code was '%2'. This is because the associated task could not be stopped as part of an offline operation. You may need to stop it manually using the Task Scheduler snapin.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4866 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: VolumeSnapshotServiceResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4866 — Volume shadow copy service task resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: VolumeSnapshotServiceResource

Message #

Volume shadow copy service task resource '%1' failed. The error code was '%2'. This is because the associated task could not be deleted as part of an offline operation. You may need to delete it manually using the Task Scheduler snapin.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4867 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: VolumeSnapshotServiceResource

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4867 — Volume shadow copy service task resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: VolumeSnapshotServiceResource

Message #

Volume shadow copy service task resource '%1' failed. The error code was '%2'. This is because the associated task could not be added as part of an online operation. Please use the Task Scheduler snapin to ensure your tasks are properly configured.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4868 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`SessionName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4868 — Cluster service failed to start the cluster log trace session.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Cluster service failed to start the cluster log trace session. The error code was '%2'. The cluster will function properly, but supplemental logging information will be missing. Use the Performance Monitor snapin to verify the event channel settings for '%1'.

Fields #

Name	Description
`SessionName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 4869 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 4869 — User mode health monitoring has detected that the system is not being responsive.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

User mode health monitoring has detected that the system is not being responsive. The Failover cluster virtual adapter has lost contact with the '%1' process with a process ID '%2', for '%3' seconds. Please use Performance Monitor to evaluate the health of the system and determine which process may be negatively impacting the system.

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 4870 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 4870 — User mode health monitoring has detected that the system is not being responsive.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

User mode health monitoring has detected that the system is not being responsive. The Failover cluster virtual adapter has lost contact with the '%1' process with a process ID '%2', for '%3' seconds. Recovery action will be taken.

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 4871 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 4871 — The cluster service failed to start.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

The cluster service failed to start. This was because the failover cluster virtual adapter failed to initialize the miniport adapter. The error code was '%1'. Verify that other network adapters are functioning properly and check the device manager for errors. If the configuration was changed, it may be necessary to reinstall the failover clustering feature on this computer.

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 4872 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 4872 — The failover cluster virtual adapter failed to generate a unique MAC address.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

The failover cluster virtual adapter failed to generate a unique MAC address. Either it was unable to find a physical Ethernet adapter from which to generate a unique address or the generated address conflicts with another adapter on this machine. Please run the Validate a Configuration wizard to check your network configuration.

Fields #

Name	Description
`Status` UInt32	— NTSTATUS reference

Event ID 4873 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Event ID 4873 — The cluster service has detected that the failover cluster virtual adapter has stopped.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Message #

The cluster service has detected that the failover cluster virtual adapter has stopped. This is expected when hot replace CPU is performed on this node. Cluster service will stop and should automatically restart after the operation is complete. Please check for additional events associated with the service and ensure that the cluster service has been restarted on this node.

Event ID 4874 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterVirtualAdapter

Description

User mode health monitoring has detected that the system is not being responsive. The Failover Cluster virtual adapter has lost contact with a process. Recovery action will be taken.

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 4874 — User mode health monitoring has detected that the system is not being responsive.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterVirtualAdapter

Description

User mode health monitoring has detected that the system is not being responsive. The Failover Cluster virtual adapter has lost contact with a process. Recovery action will be taken.

Message #

User mode health monitoring has detected that the system is not being responsive. The Failover Cluster virtual adapter has lost contact with a process. Recovery action will be taken.  

 Process: %1 
 Process ID: %2 
 Seconds: %3

Fields #

Name	Description
`ProcessName` UnicodeString	—
`ProcessId` Pointer	—
`Period` UInt32	—

Event ID 5120 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state because of 'ErrorCode'. All I/O will temporarily be queued until a path to the volume is reestablished.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`DiskDeviceNumber` UnicodeString	—
`DiskDeviceGuid` UnicodeString	—

Event ID 5120 — Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state because of 'ErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state because of 'ErrorCode'. All I/O will temporarily be queued until a path to the volume is reestablished.

Message #

Cluster Shared Volume '%1' ('%2') has entered a paused state because of '%3'. All I/O will temporarily be queued until a path to the volume is reestablished.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`DiskDeviceNumber` UnicodeString	—
`DiskDeviceGuid` UnicodeString	—

Event ID 5121 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5121 — Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer directly accessible from this cluster node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') is no longer directly accessible from this cluster node. I/O access will be redirected to the storage device over the network to the node that owns the volume. If this results in degraded performance, please troubleshoot this node's connectivity to the storage device and I/O will resume to a healthy state once connectivity to the storage device is reestablished.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5122 — Cluster Shared Volume 'VolumeName' ('ResourceName') has now resumed normal operation.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') has now resumed normal operation.

Message #

Cluster Shared Volume '%1' ('%2') has now resumed normal operation.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5123 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster service failed to create the Cluster Shared Volumes root directory 'RootName'. The error message was 'ErrorMessage'.

Fields #

Name	Description
`ErrorMessage` UnicodeString	—
`RootName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5123 — Cluster service failed to create the Cluster Shared Volumes root directory 'RootName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cluster service failed to create the Cluster Shared Volumes root directory 'RootName'. The error message was 'ErrorMessage'.

Message #

Cluster service failed to create the Cluster Shared Volumes root directory '%2'. The error message was '%1'.

Fields #

Name	Description
`ErrorMessage` UnicodeString	—
`RootName` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5124 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volumes root directory 'RootName' already exists. The directory 'RootName' was renamed to 'RenamedDirectoryName'. Please verify that applications accessing data in this location have been updated as necessary.

Fields #

Name	Description
`RootName` UnicodeString	—
`RenamedDirectoryName` UnicodeString	—

Event ID 5124 — Cluster Shared Volumes root directory 'RootName' already exists.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Message #

Cluster Shared Volumes root directory '%1' already exists. The directory '%1' was renamed to '%2'. Please verify that applications accessing data in this location have been updated as necessary.

Fields #

Name	Description
`RootName` UnicodeString	—
`RenamedDirectoryName` UnicodeString	—

Event ID 5125 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`DriverNames` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5125 — Cluster Shared Volume 'VolumeName' ('ResourceName') has identified one or more active filter drivers on this device stack that could interfere with CSV operations.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%3') has identified one or more active filter drivers on this device stack that could interfere with CSV operations. I/O access will be redirected to the storage device over the network through another Cluster node. This may result in degraded performance. Please contact the filter driver vendor to verify interoperability with Cluster Shared Volumes. 

Active filter drivers found:
%2

Fields #

Name	Description
`VolumeName` UnicodeString	—
`DriverNames` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5126 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`DriverName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5126 — Cluster Shared Volume 'VolumeName' ('ResourceName') has identified one or more active volume drivers on this device stack that could interfere with CSV operations.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%3') has identified one or more active volume drivers on this device stack that could interfere with CSV operations. I/O access will be redirected to the storage device over the network through another Cluster node. This may result in degraded performance. Please contact the volume driver vendor to verify interoperability with Cluster Shared Volumes. 

Active volume drivers found:
%2

Fields #

Name	Description
`VolumeName` UnicodeString	—
`DriverName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5128 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5128 — Physical disk resource 'ResourceName' does not allow disabling short name generation.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Physical disk resource '%1' does not allow disabling short name generation. This may cause application compatibility issues. Please use 'fsutil 8dot3name set 2' to allow disabling short name generation and then offline/online the resource.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5129 — Cluster Shared Volumes has been enabled on this cluster by user 'UserName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volumes has been enabled on this cluster by user 'UserName'.

Message #

Cluster Shared Volumes has been enabled on this cluster by user '%1'.

Fields #

Name	Description
`UserName` UnicodeString	—

Event ID 5130 — Cluster Shared Volumes has been disabled on this cluster by user 'UserName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volumes has been disabled on this cluster by user 'UserName'.

Message #

Cluster Shared Volumes has been disabled on this cluster by user '%1'.

Fields #

Name	Description
`UserName` UnicodeString	—

Event ID 5131 — Cluster Disk 'ResourceName' has been added to Cluster Shared Volumes.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Disk 'ResourceName' has been added to Cluster Shared Volumes.

Message #

Cluster Disk '%1' has been added to Cluster Shared Volumes.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5132 — Cluster Disk 'ResourceName' has been removed from Cluster Shared Volumes.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Disk 'ResourceName' has been removed from Cluster Shared Volumes. The disk resource 'ResourceName' is now part of the 'Available Storage' cluster group.

Message #

Cluster Disk '%1' has been removed from Cluster Shared Volumes. The disk resource '%1' is now part of the 'Available Storage' cluster group.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5133 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5133 — Cluster Disk 'ResourceName' has been removed and placed back in the 'Available Storage' cluster group.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Disk '%1' has been removed and placed back in the 'Available Storage' cluster group. During this process an attempt to restore the original drive letter(s) has taken longer than expected, possibly due to those drive letters being already in use.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5134 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster service failed to set the permissions (ACL) on the Cluster Shared Volumes root directory 'RootName'. The error was 'ErrorMessage'.

Fields #

Name	Description
`RootName` UnicodeString	—
`ErrorMessage` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5134 — Cluster service failed to set the permissions (ACL) on the Cluster Shared Volumes root directory 'RootName'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cluster service failed to set the permissions (ACL) on the Cluster Shared Volumes root directory 'RootName'. The error was 'ErrorMessage'.

Message #

Cluster service failed to set the permissions (ACL) on the Cluster Shared Volumes root directory '%1'. The error was '%2'.

Fields #

Name	Description
`RootName` UnicodeString	—
`ErrorMessage` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5135 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster service failed to set the permissions on the Cluster Shared Volume directory 'FolderName' ('ResourceName'). The error was 'ErrorMessage'.

Fields #

Name	Description
`FolderName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorMessage` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5135 — Cluster service failed to set the permissions on the Cluster Shared Volume directory 'FolderName' ('ResourceName').

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cluster service failed to set the permissions on the Cluster Shared Volume directory 'FolderName' ('ResourceName'). The error was 'ErrorMessage'.

Message #

Cluster service failed to set the permissions on the Cluster Shared Volume directory '%1' ('%2'). The error was '%3'.

Fields #

Name	Description
`FolderName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorMessage` UnicodeString	—
`Status` UnicodeString	— NTSTATUS reference

Event ID 5136 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5136 — Cluster Shared Volume 'VolumeName' ('ResourceName') redirected access was turned on.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') redirected access was turned on. Access to the storage device will be redirected over the network from all cluster nodes that are accessing this volume. This may result in degraded performance. Turn off redirected access for this volume to resume normal operations.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5137 — Cluster Shared Volume 'VolumeName' ('ResourceName') redirected access was turned off.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') redirected access was turned off. The volume has now resumed normal operation.

Message #

Cluster Shared Volume '%1' ('%2') redirected access was turned off. The volume has now resumed normal operation.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5138 — Cluster Shared Volume 'VolumeName' ('ResourceName') maintenance was turned on.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') maintenance was turned on. This volume will not be accessible by the highly available service or application until maintenance is complete and the volume maintenance is turned off.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5139 — Cluster Shared Volume 'VolumeName' ('ResourceName') maintenance was turned off.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') maintenance was turned off.

Message #

Cluster Shared Volume '%1' ('%2') maintenance was turned off.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5140 — Cluster Shared Volume 'VolumeName' ('ResourceName') backup was turned on.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') backup was turned on. Once the backup application completes the backup process, the Cluster Shared Volume backup mode will be turned off. If the backup application has not initiated a snapshot using the Volume Shadow Copy Service within %3 minutes, Cluster Shared Volume backup will be turned off.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`MaximumTimeMinutes` UnicodeString	—

Event ID 5141 — Cluster Shared Volume 'VolumeName' ('ResourceName') backup was turned off.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') backup was turned off.

Message #

Cluster Shared Volume '%1' ('%2') backup was turned off.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—

Event ID 5142 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer accessible from this cluster node because of error 'ErrorCode'. Please troubleshoot this node's connectivity to the storage device and network connectivity.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonCode` UnicodeString	—
`DiskDeviceNumber` UnicodeString	—
`DiskDeviceGuid` UnicodeString	—

Event ID 5142 — Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer accessible from this cluster node because of error 'ErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Message #

Cluster Shared Volume '%1' ('%2') is no longer accessible from this cluster node because of error '%3'. Please troubleshoot this node's connectivity to the storage device and network connectivity.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—
`ReasonCode` UnicodeString	—
`DiskDeviceNumber` UnicodeString	—
`DiskDeviceGuid` UnicodeString	—

Event ID 5143 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`NodeName` UnicodeString	—
`ResourceName` UnicodeString	—
`CcDirtyPageThreshold` UnicodeString	—
`CcTotalDirtyPages` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5143 — Move of the disk ('ResourceName') is vetoed based on the current state of the Cache Manager on the node 'NodeName' to prevent a potential deadlock.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Move of the disk ('%2') is vetoed based on the current state of the Cache Manager on the node '%1' to prevent a potential deadlock. 'Cache Manager Dirty Pages Theshold' is %3, and 'Cache Manager Dirty Pages' is %4. Move is allowed if 'Cache Manager Dirty Pages' is less than 70% of 'Cache Manager Dirty Pages Theshold' or if 'Cache Manager Dirty Pages Theshold' minus 'Cache Manager Dirty Pages' is greater than 128000 pages (about 500MB if a page size is 4096 bytes). Cluster vetoed resource move to prevent potential deadlock due to Cache Manager throttling buffered writes while Cluster Shared Volumes on this disk are being paused.

Fields #

Name	Description
`NodeName` UnicodeString	—
`ResourceName` UnicodeString	—
`CcDirtyPageThreshold` UnicodeString	—
`CcTotalDirtyPages` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5144 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`SnapshotVolume` UnicodeString	—

Event ID 5144 — While adding the disk ('ResourceName') to Cluster Shared Volumes, setting explicit snapshot diff area association for volume ('VolumeName') failed with error 'SnapshotVolume'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

While adding the disk ('%1') to Cluster Shared Volumes, setting explicit snapshot diff area association for volume ('%2') failed with error '%3'. The only supported software snapshot diff area association for Cluster Shared Volumes is to self.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`SnapshotVolume` UnicodeString	—

Event ID 5145 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`DiffVolume` UnicodeString	—

Event ID 5145 — Cluster disk resource 'ResourceName' failed to delete a software snapshot.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster disk resource '%1' failed to delete a software snapshot.  The diff area on volume '%3' could not be dissociated from volume '%2'. This may be caused by active snapshots. Cluster Shared Volumes requires that the software snapshot be located on the same disk.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`DiffVolume` UnicodeString	—

Event ID 5146 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Move of the Cluster Shared Volume resource '' is vetoed because one of the volumes belonging to the resource is in dismounted state. Please retry the action after the dismount operation is completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5146 — Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because one of the volumes belonging to the resource is in dismounted state.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Move of the Cluster Shared Volume resource '' is vetoed because one of the volumes belonging to the resource is in dismounted state. Please retry the action after the dismount operation is completed.

Message #

Move of the Cluster Shared Volume resource '%1' is vetoed because one of the volumes belonging to the resource is in dismounted state. Please retry the action after the dismount operation is completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5147 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5147 — Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because a snapshot is being created on one of the volumes belonging to the resource.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Move of the Cluster Shared Volume resource '%1' is vetoed because a snapshot is being created on one of the volumes belonging to the resource. Please retry the action after the snapshot creation is completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5148 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5148 — Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because an IO mode change operation (Direct IO to Redirected IO or vice versa) is in prog...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Move of the Cluster Shared Volume resource '%1' is vetoed because an IO mode change operation (Direct IO to Redirected IO or vice versa) is in progress on one of the volumes belonging to the resource. Please retry the action after the operation is completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5149 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cache size resized to 'CacheSizeInMb' based on populated memory, user setsize is too high.

Fields #

Name	Description
`CacheSizeInMb` UnicodeString	—

Event ID 5149 — Cache size resized to 'CacheSizeInMb' based on populated memory, user setsize is too high.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cache size resized to 'CacheSizeInMb' based on populated memory, user setsize is too high.

Message #

Cache size resized to '%1' based on populated memory, user setsize is too high.

Fields #

Name	Description
`CacheSizeInMb` UnicodeString	—

Event ID 5150 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster physical disk resource 'ResourceName' failed. The Cluster Shared Volume was put in failed state with the following error: 'FailureReason'.

Fields #

Name Description

ResourceName UnicodeString —

FailureReason UnicodeString

—

Known values

%%2304: An Error occured during Logon.
%%2305: The specified user account has expired.
%%2306: The NetLogon component is not active.
%%2307: Account locked out.
%%2308: The user has not been granted the requested logon type at this machine.
%%2309: The specified account's password has expired.
%%2310: Account currently disabled.
%%2311: Account logon time restriction violation.
%%2312: User not allowed to logon at this computer.
%%2313: Unknown user name or bad password.
%%2314: Domain sid inconsistent.
%%2315: Smartcard logon is required and was not used.

Event ID 5150 — Cluster physical disk resource 'ResourceName' failed.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Cluster physical disk resource 'ResourceName' failed. The Cluster Shared Volume was put in failed state with the following error: 'FailureReason'.

Message #

Cluster physical disk resource '%1' failed.  The Cluster Shared Volume was put in failed state with the following error: '%2'

Fields #

Name Description

ResourceName UnicodeString —

FailureReason UnicodeString

—

Known values

%%2304: An Error occured during Logon.
%%2305: The specified user account has expired.
%%2306: The NetLogon component is not active.
%%2307: Account locked out.
%%2308: The user has not been granted the requested logon type at this machine.
%%2309: The specified account's password has expired.
%%2310: Account currently disabled.
%%2311: Account logon time restriction violation.
%%2312: User not allowed to logon at this computer.
%%2313: Unknown user name or bad password.
%%2314: Domain sid inconsistent.
%%2315: Smartcard logon is required and was not used.

Event ID 5151 — Cluster Shared Volume 'VolumeName' (resource 'ResourceName') transitioned to state 'VolumeState' as part of processing 'Action' initiated by node 'OriginatingNode' with sequence number 'SequenceNum...

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' (resource 'ResourceName') transitioned to state 'VolumeState' as part of processing 'Action' initiated by node 'OriginatingNode' with sequence number 'SequenceNumber'.

Message #

Cluster Shared Volume '%1' (resource '%2') transitioned to state '%3' as part of processing '%4' initiated by node '%5' with sequence number '%6'.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`VolumeState` UnicodeString	—
`Action` UnicodeString	—
`OriginatingNode` UnicodeString	—
`SequenceNumber` UnicodeString	—

Event ID 5152 — Cluster Shared Volume 'VolumeName' (resource 'ResourceName') was unable to complete a state transition.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' (resource '%2') was unable to complete a  state transition. This was likely caused as part of processing '%4' with sequence number '%5' on nodes ('%3'). Cluster will attempt to create live dumps on the nodes.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`NodeNames` UnicodeString	—
`Action` UnicodeString	—
`SequenceNumber` UnicodeString	—

Event ID 5153 — Cluster Shared Volume 'VolumeName' (resource 'ResourceName') received event 'Event' with sequence number 'SequenceNumber' which originated in node 'OriginatingNode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' (resource 'ResourceName') received event 'Event' with sequence number 'SequenceNumber' which originated in node 'OriginatingNode'.

Message #

Cluster Shared Volume '%1' (resource '%2') received event '%3' with sequence number '%4' which originated in node '%5'.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`Event` UnicodeString	—
`SequenceNumber` UnicodeString	—
`OriginatingNode` UnicodeString	—

Event ID 5154 — Cluster Shared Volume 'VolumeName' (resource 'ResourceName') completed processing event 'Event' with sequence number 'SequenceNumber' which originated in node 'OriginatingNode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume 'VolumeName' (resource 'ResourceName') completed processing event 'Event' with sequence number 'SequenceNumber' which originated in node 'OriginatingNode'.

Message #

Cluster Shared Volume '%1' (resource '%2') completed processing event '%3' with sequence number '%4' which originated in node '%5'.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`Event` UnicodeString	—
`SequenceNumber` UnicodeString	—
`OriginatingNode` UnicodeString	—

Event ID 5155 — Cluster Shared Volume resource 'ResourceName' completed processing request 'Action' with sequence number 'SequenceNumber'.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster Shared Volume resource 'ResourceName' completed processing request 'Action' with sequence number 'SequenceNumber'. The slowest node was 'Node', which took TimeTaken seconds.

Message #

Cluster Shared Volume resource '%1' completed processing request '%2' with sequence number '%3'. The slowest node was '%4', which took %5 seconds.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`Action` UnicodeString	—
`SequenceNumber` UnicodeString	—
`Node` UnicodeString	—
`TimeTaken` UnicodeString	—

Event ID 5156 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5156 — Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state because of 'ErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') has entered a paused state because of '%3'. This error is encountered when the volsnap snapshots underlying the CSV volume are deleted outside of a user request. Possible causes of the snapshots getting deleted are lack of space in the volume for the snapshots to grow, or IO failure while trying to update the snapshot data. All I/O will temporarily be queued until the snapshot state is synchronized with volsnap.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5157 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5157 — Cluster Shared Volume 'VolumeName' ('ResourceName') has entered a paused state because of 'ErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster Shared Volume '%1' ('%2') has entered a paused state because of '%3'. All I/O will temporarily be queued until a path to the volume is reestablished. This error is usually caused by an infrastructure failure. For example, losing connectivity to storage or the node owning the Cluster Shared Volume being removed from active cluster membership.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5158 — SMB client connection to server 'ServerName' (node 'Node') on instance 'SMBInstance' was explicitly disconnected because Reason.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

SMB client connection to server '%1' (node '%2') on instance '%3' was explicitly disconnected because %4. This will result in all outstanding IO to that server to fail immediately. This is a fast-fail mechanism to recover from IOs that are stuck in a connection which is no longer responsive.

Fields #

Name	Description
`ServerName` UnicodeString	—
`Node` UnicodeString	—
`SMBInstance` UnicodeString	—
`Reason` UnicodeString	—

Event ID 5159 — SMB client connection from source address 'SourceAddress' to destination address 'DestAddress' for server 'ServerName' (node 'Node') on instance 'SMBInstance' was explicitly disconnected...

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

SMB client connection from source address '%1' to destination address '%2' for server '%3' (node '%4') on instance '%5' was explicitly disconnected because %6. This will result in all outstanding IO on that connection to fail immediately. This is a fast-fail mechanism to recover from IOs that are stuck in a connection which is no longer responsive.

Fields #

Name	Description
`SourceAddress` UnicodeString	—
`DestAddress` UnicodeString	—
`ServerName` UnicodeString	—
`Node` UnicodeString	—
`SMBInstance` UnicodeString	—
`Reason` UnicodeString	—

Event ID 5160 — SMB client disconnect state for connection to server 'ServerName' (node 'Node') on instance 'SMBInstance' was cleared.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Message #

SMB client disconnect state for connection to server '%1' (node '%2') on instance '%3' was cleared. This will restore the connection to a healthy state, and SMB client will no longer fail IO on that connection.

Fields #

Name	Description
`ServerName` UnicodeString	—
`Node` UnicodeString	—
`SMBInstance` UnicodeString	—

Event ID 5161 — The volume name 'VolumeName' was removed because the underlying disk partition for resource 'Resource' no longer contains a recognizable file system.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

The volume name 'VolumeName' was removed because the underlying disk partition for resource 'Resource' no longer contains a recognizable file system. This volume name may be re-used by cluster in the future.

Message #

The volume name '%1' was removed because the underlying disk partition for resource '%2' no longer contains a recognizable file system. This volume name may be re-used by cluster in the future.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`Resource` UnicodeString	—

Event ID 5162 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5162 — Move of the Cluster Shared Volume resource 'ResourceName' is vetoed because there is a Data Integrity Scan is in progress on one of the volumes belonging to ...

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Move of the Cluster Shared Volume resource '%1' is vetoed because there is a Data Integrity Scan is in progress on one of the volumes belonging to the resource. Please retry the action after the operation is completed.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5163 — Cluster service disabled RDMA on the SMB instance for SMBInstanceName IO on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster service disabled RDMA on the SMB instance for SMBInstanceName IO on this node. All IO for this instance will now go over TCP connections only.

Message #

Cluster service disabled RDMA on the SMB instance for %1 IO on this node. All IO for this instance will now go over TCP connections only.

Fields #

Name	Description
`SMBInstanceName` UnicodeString	—

Event ID 5164 — Cluster service enabled RDMA on the SMB instance for SMBInstanceName IO on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Cluster service enabled RDMA on the SMB instance for SMBInstanceName IO on this node.

Message #

Cluster service enabled RDMA on the SMB instance for %1 IO on this node.

Fields #

Name	Description
`SMBInstanceName` UnicodeString	—

Event ID 5200 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterAuthenticationManager

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 5200 — Cluster service failed to create a cluster identity token for Cluster Shared Volumes.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterAuthenticationManager

Message #

Cluster service failed to create a cluster identity token for Cluster Shared Volumes. The error code was '%1'. Ensure the domain controller is accessible and check for connectivity issues. Until connection to the domain controller is recovered, some operations on this node against the Cluster Shared Volumes might fail.

Fields #

Name	Description
`Status` UnicodeString	— NTSTATUS reference

Event ID 5216 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Software snapshot creation on Cluster Shared Volume 'VolumeName' ('ResourceName') failed with error ErrorCode. The resource must be online to support snapshot creation. Please check the state of the resource.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5216 — Software snapshot creation on Cluster Shared Volume 'VolumeName' ('ResourceName') failed with error ErrorCode.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Message #

Software snapshot creation on Cluster Shared Volume '%1' ('%2') failed with error %3. The resource must be online to support snapshot creation. Please check the state of the resource.

Fields #

Name	Description
`VolumeName` UnicodeString	—
`ResourceName` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5217 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Software snapshot creation on Cluster Shared Volume(s) ('') with snapshot set id '' failed with error ''. Please check the state of the CSV resources and the system events of the resource owner nodes.

Fields #

Name	Description
`VolumeNames` UnicodeString	—
`SnapshotSet` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5217 — Software snapshot creation on Cluster Shared Volume(s) ('VolumeNames') with snapshot set id 'SnapshotSet' failed with error 'ErrorCode'.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Description

Message #

Software snapshot creation on Cluster Shared Volume(s) ('%1') with snapshot set id '%2' failed with error '%3'. Please check the state of the CSV resources and the system events of the resource owner nodes.

Fields #

Name	Description
`VolumeNames` UnicodeString	—
`SnapshotSet` UnicodeString	—
`ErrorCode` UnicodeString	—

Event ID 5218 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`SnapshotAgeLimit` UnicodeString	—
`SnapshotId` UnicodeString	—
`SnapshotOriginNode` UnicodeString	—
`SnapshotDateTime` UnicodeString	—

Event ID 5218 — Cluster physical disk resource 'ResourceName' deleted a software snapshot.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster physical disk resource '%1' deleted a software snapshot. The software snapshot on Cluster Shared Volume '%2' was deleted because it was older than '%3' day(s). The snapshot ID was '%4' and it was created from node '%5' at '%6'. It is expected that snapshots are deleted by a backup application after a backup job is completed.  This snapshot exceeded the time that is expected for a snapshot to exist. Verify with the backup application that backup jobs are completing successfully.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`VolumeName` UnicodeString	—
`SnapshotAgeLimit` UnicodeString	—
`SnapshotId` UnicodeString	—
`SnapshotOriginNode` UnicodeString	—
`SnapshotDateTime` UnicodeString	—

Event ID 5219 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Fields #

Name	Description
`ErrorCode` UnicodeString	—

Event ID 5219 — Cluster service failed to register the Cluster Shared Volumes snapshot provider with the Volume Shadow Service (VSS).

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ClusterSharedVolume

Message #

Cluster service failed to register the Cluster Shared Volumes snapshot provider with the Volume Shadow Service (VSS). This may be due to the VSS service shutting down or may be a problem with the VSS service having a problem that causes it to not accept incoming requests. 

Error: %1

Fields #

Name	Description
`ErrorCode` UnicodeString	—

Event ID 5220 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: StorageSpacesDirect

Description

Cluster Service detected the fault domain settings may not be configured optimally. The current settings could result in reduced storage resiliency.

Fields #

Name	Description
`ResiliencyName` UnicodeString	—

Event ID 5220 — Cluster Service detected the fault domain settings may not be configured optimally.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: StorageSpacesDirect

Description

Cluster Service detected the fault domain settings may not be configured optimally. The current settings could result in reduced storage resiliency.

Message #

Cluster Service detected the fault domain settings may not be configured optimally. The current settings could result in reduced storage resiliency. 

Current Resiliency Level: %1

Fields #

Name	Description
`ResiliencyName` UnicodeString	—

Event ID 5235 — Task 'TaskName' is successfully registered.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: TaskSchedulerResource

Description

Task 'TaskName' is successfully registered.

Message #

Task '%1' is successfully registered.

Fields #

Name	Description
`TaskName` UnicodeString	—

Event ID 5237 — Task 'TaskName' is successfully changed.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: TaskSchedulerResource

Description

Task 'TaskName' is successfully changed.

Message #

Task '%1' is successfully changed.

Fields #

Name	Description
`TaskName` UnicodeString	—

Event ID 5245 — Task 'TaskName' is successfully deleted.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: TaskSchedulerResource

Description

Task 'TaskName' is successfully deleted.

Message #

Task '%1' is successfully deleted.

Fields #

Name	Description
`TaskName` UnicodeString	—

Event ID 5264 — Physical Disk resource 'DeviceName' has been disconnected from this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: StorageTopologyManager

Description

Physical Disk resource 'DeviceName' has been disconnected from this node.

Message #

Physical Disk resource '%1' has been disconnected from this node.

Fields #

Name	Description
`DeviceName` UnicodeString	—

Event ID 5265 — Cluster network 'NetworkName' is down because the network interfaces connected to it are not operational.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Message #

Cluster network '%1' is down because the network interfaces connected to it are not operational. Cluster network '%1' is configured such that cluster communication is not allowed; however, if this failure is unexpected, run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`NetworkName` UnicodeString	—

Event ID 5266 — Cluster network interface 'InterfaceName' for cluster node 'NodeName' on network 'NetworkName' is not operational.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NetworkManager

Message #

Cluster network interface '%1' for cluster node '%2' on network '%3' is not operational. Network '%3' is configured such that cluster communication is not allowed; however, if this failure is unexpected, run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapter. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.

Fields #

Name	Description
`InterfaceName` UnicodeString	—
`NodeName` UnicodeString	—
`NetworkName` UnicodeString	—

Event ID 5267 — ClusterMrr API request timed out because some nodes did not reply to the request within the specified time.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: StorageTopologyManager

Description

ClusterMrr API request timed out because some nodes did not reply to the request within the specified time.

Message #

ClusterMrr API request timed out because some nodes did not reply to the request within the specified time.

Component: %1
TimeoutInSeconds: %2
StragglerNodes: %3

Fields #

Name	Description
`ComponentName` UnicodeString	—
`TimeoutInSeconds` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 5268 — Too many ClusterMrr API requests are outstanding on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: StorageTopologyManager

Message #

Too many ClusterMrr API requests are outstanding on this node. If the number of requests is very high, then the applications that are generating such requests should be investigated. If the rate of requests being processed is low, the component listed below should be investigated.

Component: %1
RequestsBeingProcessed: %2
RequestsWaitingToBeProcessed: %3
RequestsReceivedInLastInterval: %4
RequestsProcessesedInLastInterval: %5
LastIntervalTimeInSeconds: %6
AverageRequestsProcessedPerSecond: %7

Fields #

Name	Description
`ComponentName` UnicodeString	—
`RequestsBeingProcessed` UnicodeString	—
`RequestsWaitingToBeProcessed` UnicodeString	—
`ReceivedRequests` UnicodeString	—
`ProcessedRequests` UnicodeString	—
`RequestInterval` UnicodeString	—
`ProcessingRate` UnicodeString	—

Event ID 5269 — ClusterMrr API request handler timed out on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: StorageTopologyManager

Description

ClusterMrr API request handler timed out on this node.

Message #

ClusterMrr API request handler timed out on this node. 

MessageDescription: %1
MessageAction: %2
Component: %3
TimeoutInSeconds: %4

Fields #

Name	Description
`MessageDescription` UnicodeString	—
`MessageAction` UnicodeString	—
`ComponentName` UnicodeString	—
`TimeoutInSeconds` UnicodeString	—

Event ID 5377 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GlobalUpdateMgr

Fields #

Name	Description
`OperationName` UnicodeString	—
`ThresholdTimeInSec` UnicodeString	—

Event ID 5377 — An internal Cluster service operation exceeded the defined threshold of 'ThresholdTimeInSec' seconds.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: GlobalUpdateMgr

Message #

An internal Cluster service operation exceeded the defined threshold of '%2' seconds. The Cluster service has been terminated to recover. Service Control Manager will restart the Cluster service and the node will rejoin the cluster.

Fields #

Name	Description
`OperationName` UnicodeString	—
`ThresholdTimeInSec` UnicodeString	—

Event ID 5393 — The Cluster detected that this node is slower than others and degrade Cluster performance.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: GlobalUpdateMgr

Message #

The Cluster detected that this node is slower than others and degrade Cluster performance. If the condition persists, check for hardware or software errors related to this node. To avoid repeated events it is supress for 24 hours unless the Cluster service is restarted.

Fields #

Name	Description
`SlowOperations` UnicodeString	—
`TotalOperations` UnicodeString	—
`TimeFrameInSec` UnicodeString	—

Event ID 5394 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Description

The Cluster service encountered some storage errors while trying to bring storage pool online. Run cluster storage validation to troubleshoot the issue.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5394 — The Cluster service encountered some storage errors while trying to bring storage pool online.

Provider: Microsoft-Windows-FailoverClustering
Channel: System

Description

The Cluster service encountered some storage errors while trying to bring storage pool online. Run cluster storage validation to troubleshoot the issue.

Message #

The Cluster service encountered some storage errors while trying to bring storage pool online. Run cluster storage validation to troubleshoot the issue.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5395 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Cluster is moving the group for storage pool 'ResourceName' because current node 'NodeName' does not have optimal connectivity to the storage pool physical disks.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 5395 — Cluster is moving the group for storage pool 'ResourceName' because current node 'NodeName' does not have optimal connectivity to the storage pool physical disks.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ResourceControlManager

Description

Cluster is moving the group for storage pool 'ResourceName' because current node 'NodeName' does not have optimal connectivity to the storage pool physical disks.

Message #

Cluster is moving the group for storage pool '%1' because current node '%3' does not have optimal connectivity to the storage pool physical disks.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`GroupName` UnicodeString	—
`NodeName` UnicodeString	—

Event ID 5396 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: NodeMgr

Event ID 5396 — The Cluster service on this node is shutting down because it has detected that there are other cluster nodes that have quorum.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: NodeMgr

Message #

The Cluster service on this node is shutting down because it has detected that there are other cluster nodes that have quorum. This occurs when the Cluster service detects another node that was started with the Force Quorum switch (/fq).  The node which was started with the Force Quorum Switch will remain running.  Use Failover Cluster Manager to verify that this node automatically joined the cluster when the cluster service restarted.

Event ID 5397 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ReplicatedLocalUserAccount

Description

The cluster resource 'ResourceName' could not create or modify the replicated local user account 'AccountName' on this node. Check the cluster logs for more information.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`AccountName` UnicodeString	—

Event ID 5397 — The cluster resource 'ResourceName' could not create or modify the replicated local user account 'AccountName' on this node.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: ReplicatedLocalUserAccount

Description

The cluster resource 'ResourceName' could not create or modify the replicated local user account 'AccountName' on this node. Check the cluster logs for more information.

Message #

The cluster resource '%1' could not create or modify the replicated local user account '%2' on this node. Check the cluster logs for more information.

Fields #

Name	Description
`ResourceName` UnicodeString	—
`AccountName` UnicodeString	—

Event ID 5398 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`RequiredVotes` UnicodeString	—
`RunningVotes` UnicodeString	—
`NodesWithWeight` UnicodeString	—

Event ID 5398 — Cluster failed to start.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Cluster failed to start. The latest copy of cluster configuration data was not available within the set of nodes attempting to start the cluster. Changes to the cluster occurred while the set of nodes were not in membership and as a result were not able to receive configuration data updates. .

Votes required to start cluster: %1
Votes available: %2
Nodes with votes: %3

Guidance:
Attempt to start the cluster service on all nodes in the cluster so that nodes with the latest copy of the cluster configuration data can first form the cluster. The cluster will be able to start and the nodes will automatically obtain the updated cluster configuration data. If there are no nodes available with the latest copy of the cluster configuration data, run the 'Start-ClusterNode -FQ' Windows PowerShell cmdlet. Using the ForceQuorum (FQ) parameter will start the cluster service and mark this node's copy of the cluster configuration data to be authoritative.  Forcing quorum on a node with an outdated copy of the cluster database may result in cluster configuration changes that occurred while the node was not participating in the cluster to be lost.

Fields #

Name	Description
`RequiredVotes` UnicodeString	—
`RunningVotes` UnicodeString	—
`NodesWithWeight` UnicodeString	—

Event ID 5399 —

Provider: Microsoft-Windows-FailoverClustering
Channel: DiagnosticVerbose

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5399 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5400 —

Provider: Microsoft-Windows-FailoverClustering
Channel: DiagnosticVerbose

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5400 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5401 —

Provider: Microsoft-Windows-FailoverClustering
Channel: DiagnosticVerbose

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5401 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5408 —

Provider: Microsoft-Windows-FailoverClustering
Channel: DiagnosticVerbose

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5408 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5409 —

Provider: Microsoft-Windows-FailoverClustering
Channel: ClusterSetDiagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5409 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5410 —

Provider: Microsoft-Windows-FailoverClustering
Channel: ClusterSetDiagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5410 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5411 —

Provider: Microsoft-Windows-FailoverClustering
Channel: ClusterSetDiagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5411 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5412 —

Provider: Microsoft-Windows-FailoverClustering
Channel: ClusterSetDiagnostic

Message #

%1

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5412 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational

Fields #

Name	Description
`LogString` UnicodeString	—

Event ID 5413 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

The cluster has cold started.

Event ID 5413 — The cluster has cold started.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Description

The cluster has cold started.

Message #

The cluster has cold started.

Event ID 5414 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5414 — Failed to create the clustered role "ResourceName" because Azure Stack HCI is out of policy.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Message #

Failed to create the clustered role "%1" because Azure Stack HCI is out of policy. Azure Stack HCI requires an Azure subscription and needs to regularly connect to the cloud. Register now or troubleshoot your connection. See aka.ms/register-hci for more information.

Fields #

Name	Description
`ResourceName` UnicodeString	—

Event ID 5415 — Group is about to move to new owner.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Group is about to move to new owner. GroupName:GroupName, GroupId:GroupId, CurrentOwner:CurrentOwner, NewOwner:NewOwner, Reason:Reason.

Message #

Group is about to move to new owner. GroupName:%1, GroupId:%2, CurrentOwner:%3, NewOwner:%4, Reason:%5

Fields #

Name	Description
`GroupName` UnicodeString	—
`GroupId` UnicodeString	—
`CurrentOwner` UnicodeString	—
`NewOwner` UnicodeString	—
`Reason` UnicodeString	—

Event ID 5416 — Property change has occured.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ResourceControlManager

Description

Property change has occured. ObjectName:ObjectName, ObjectId: ObjectId, Reason:Reason, Changes:Changes.

Message #

Property change has occured. ObjectName:%1, ObjectId: %2, Reason:%3, Changes:%4

Fields #

Name	Description
`ObjectName` UnicodeString	—
`ObjectId` UnicodeString	—
`Reason` UnicodeString	—
`Changes` UnicodeString	—

Event ID 5417 — Cluster Service has terminated due to a fatal error.

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

Cluster Service has terminated due to a fatal error. Error Message: ErrorMessage, Error Code: ErrorCode.

Message #

Cluster Service has terminated due to a fatal error. Error Message: %1, Error Code: %2

Fields #

Name	Description
`ErrorMessage` UnicodeString	—
`ErrorCode` UInt32	—

Event ID 5424 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: Startup/Shutdown

Description

Clusapi handle of type has been marked as dead. RPC Error , Cluster Error .

Fields #

Name	Description
`HandleType` UnicodeString	—
`RpcError` UInt32	—
`ClusterError` UInt32	—

Event ID 5424 — Clusapi handle of type HandleType has been marked as dead.

Provider: Microsoft-Windows-FailoverClustering
Channel: System
Task: Startup/Shutdown

Description

Clusapi handle of type HandleType has been marked as dead. RPC Error RpcError, Cluster Error ClusterError.

Message #

Clusapi handle of type %1 has been marked as dead. RPC Error %2, Cluster Error %3.

Fields #

Name	Description
`HandleType` UnicodeString	—
`RpcError` UInt32	—
`ClusterError` UInt32	—

Event ID 43968 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Volume activating.

Fields #

Name	Description
`VolumeId` UInt64	—
`VolumeNumber` UInt32	—
`MappedPath` UnicodeString	—
`TargetPath` UnicodeString	—

Event ID 43968 — Volume VolumeId activating.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

Volume VolumeId activating.

Message #

Volume %1 activating

Fields #

Name	Description
`VolumeId` UInt64	—
`VolumeNumber` UInt32	—
`MappedPath` UnicodeString	—
`TargetPath` UnicodeString	—

Event ID 43969 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

Volume deactivating.

Fields #

Name	Description
`VolumeId` UInt64	—

Event ID 43969 — Volume VolumeId deactivating.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

Volume VolumeId deactivating.

Message #

Volume %1 deactivating

Fields #

Name	Description
`VolumeId` UInt64	—

Event ID 43970 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

IO is of type.

Fields #

Name	Description
`IoId` UInt64	—
`IrpMajorFunction` UInt32	—
`FileContext` UInt64	—
`Size` UInt32	—
`IrpMinorFunction` UInt32	—
`FileObject` UInt64	—
`ShadowFileObject` UInt64	—

Event ID 43970 — IO IoId is of type IrpMajorFunction.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

IO IoId is of type IrpMajorFunction.

Message #

IO %1 is of type %2

Fields #

Name	Description
`IoId` UInt64	—
`IrpMajorFunction` UInt32	—
`FileContext` UInt64	—
`Size` UInt32	—
`IrpMinorFunction` UInt32	—
`FileObject` UInt64	—
`ShadowFileObject` UInt64	—

Event ID 43971 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

IO now in state.

Fields #

Name	Description
`IoId` UInt64	—
`State` UInt32	—

Event ID 43971 — IO IoId now in state State.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

IO IoId now in state State.

Message #

IO %1 now in state %2

Fields #

Name	Description
`IoId` UInt64	—
`State` UInt32	—

Event ID 43972 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

fsContext opened for file.

Fields #

Name	Description
`FileId` UInt64	—
`VolumeId` UInt64	—
`Name` UnicodeString	—

Event ID 43972 — fsContext FileId opened for file Name.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

fsContext FileId opened for file Name.

Message #

fsContext %1 opened for file %3

Fields #

Name	Description
`FileId` UInt64	—
`VolumeId` UInt64	—
`Name` UnicodeString	—

Event ID 43973 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

fsContext closed.

Fields #

Name	Description
`FileId` UInt64	—

Event ID 43973 — fsContext FileId closed.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

fsContext FileId closed.

Message #

fsContext %1 closed

Fields #

Name	Description
`FileId` UInt64	—

Event ID 43974 —

Provider: Microsoft-Windows-FailoverClustering
Channel: Operational
Task: ClusterSharedVolume

Description

fsContext is in state.

Fields #

Name	Description
`FileId` UInt64	—
`State` UInt32	—

Event ID 43974 — fsContext FileId is in state State.

Provider: Microsoft-Windows-FailoverClustering
Channel: Performance-CSV
Task: ClusterSharedVolume

Description

fsContext FileId is in state State.

Message #

fsContext %1 is in state %2

Fields #

Name	Description
`FileId` UInt64	—
`State` UInt32	—