Microsoft-Windows-ReFS-v1

19 events across 2 channels

Event ID	Title	Channel
130	The file system structure on volume VolumeId has now been repaired.	System
131	The file system structure on volume VolumeId cannot be corrected.	System
132	The file system detected a checksum error and was able to correct it.	System
133	The file system detected a checksum error and was not able to correct it.	System
134	The file system was unable to write metadata to the media backing volume …	System
135	Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS …	System
136	Volume "VolumeId" was mounted in an older version of Windows.	System
237		Operational
238		Operational
272		Operational
273		Operational
274		Operational
513	The file system detected a corruption on a file.	System
514	The file system detected a corruption on a file.	System
515	The file system detected a corruption on a folder.	System
516	The file system detected a corruption on a folder.	System
519	The file system detected a corruption on file system metadata.	System
520	The file system detected a corruption on file system metadata.	System
521	Volume "ObjectName" detected a corruption on file system metadata.	System

Event ID 130 — The file system structure on volume VolumeId has now been repaired.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system structure on volume VolumeId has now been repaired.

Message #

The file system structure on volume %2 has now been repaired.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`RepairDetail` UnicodeString	—
`RepairDataLength` UInt16	—
`RepairData` Binary	—

Event ID 131 — The file system structure on volume VolumeId cannot be corrected.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system structure on volume VolumeId cannot be corrected.

Message #

The file system structure on volume %2 cannot be corrected.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`RepairDetail` UnicodeString	—
`RepairDataLength` UInt16	—
`RepairData` Binary	—

Event ID 132 — The file system detected a checksum error and was able to correct it.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a checksum error and was able to correct it. The name of the file or folder is "ObjectName".

Message #

The file system detected a checksum error and was able to correct it. The name of the file or folder is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 133 — The file system detected a checksum error and was not able to correct it.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a checksum error and was not able to correct it. The name of the file or folder is "ObjectName".

Message #

The file system detected a checksum error and was not able to correct it. The name of the file or folder is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 134 — The file system was unable to write metadata to the media backing volume VolumeId.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system was unable to write metadata to the media backing volume VolumeId. A write failed with status "FailureReason" ReFS will take the volume offline. It may be mounted again automatically.

Message #

The file system was unable to write metadata to the media backing volume %2. A write failed with status "%3" ReFS will take the volume offline. It may be mounted again automatically.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 135 — Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status FailureReason.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status FailureReason.

Message #

Volume %2 is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status %3.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 136 — Volume "VolumeId" was mounted in an older version of Windows.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

Volume "VolumeId" was mounted in an older version of Windows. Some features may be lost.

Message #

Volume "%2" was mounted in an older version of Windows. Some features may be lost.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 237 —

Provider: Microsoft-Windows-ReFS-v1
Channel: Operational

Fields #

Name	Description
`SqmType` UInt32	—
`SqmSessionGuid` GUID	—
`SqmID` UInt32	—
`SqmDWORDDatapointValue` UInt32	—

Event ID 238 —

Provider: Microsoft-Windows-ReFS-v1
Channel: Operational

Fields #

Name	Description
`SqmType` UInt32	—
`SqmSessionGuid` GUID	—
`SqmID` UInt32	—
`SqmStringDatapointValue` UnicodeString	—

Event ID 272 —

Provider: Microsoft-Windows-ReFS-v1
Channel: Operational

Fields #

Name	Description
`SqmType` UInt32	—
`SqmSessionGuid` GUID	—
`SqmID` UInt32	—
`SqmProcessHashValue` UInt32	—
`SqmStreamRowLength` UInt32	—
`SqmStreamRow` UInt16	—

Event ID 273 —

Provider: Microsoft-Windows-ReFS-v1
Channel: Operational

Fields #

Name	Description
`SqmType` UInt32	—
`SqmSessionGuid` GUID	—
`SqmID` UInt32	—
`SqmProcessHashValue` UInt32	—
`SqmStreamRowLength` UInt32	—
`SqmStreamEntriesSize` UInt32	—
`SqmStreamEntries` Binary	—
`SqmStreamFlags` UInt32	—

Event ID 274 —

Provider: Microsoft-Windows-ReFS-v1
Channel: Operational

Fields #

Name	Description
`SqmType` UInt32	—
`SqmSessionGuid` GUID	—
`SqmID` UInt32	—
`SqmDWORD64DatapointValue` UInt64	—

Event ID 513 — The file system detected a corruption on a file.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on a file. The file has been removed from the file system namespace. The name of the file is "ObjectName".

Message #

The file system detected a corruption on a file. The file has been removed from the file system namespace. The name of the file is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 514 — The file system detected a corruption on a file.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on a file. The file system may have failed to remove it from the file system namespace. The name of the file is "ObjectName".

Message #

The file system detected a corruption on a file. The file system may have failed to remove it from the file system namespace. The name of the file is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 515 — The file system detected a corruption on a folder.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on a folder. Contents of the folder have been removed from the file system namespace. The name of the folder is "ObjectName".

Message #

The file system detected a corruption on a folder. Contents of the folder have been removed from the file system namespace. The name of the folder is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 516 — The file system detected a corruption on a folder.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on a folder. The file system may have failed to remove contents of the folder from the file system namespace. The name of the folder is "ObjectName".

Message #

The file system detected a corruption on a folder. The file system may have failed to remove contents of the folder from the file system namespace. The name of the folder is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 519 — The file system detected a corruption on file system metadata.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on file system metadata. The name of the stream is "ObjectName".

Message #

The file system detected a corruption on file system metadata. The name of the stream is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 520 — The file system detected a corruption on file system metadata.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

The file system detected a corruption on file system metadata. The name of the stream is "ObjectName".

Message #

The file system detected a corruption on file system metadata. The name of the stream is "%2".

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.

Event ID 521 — Volume "ObjectName" detected a corruption on file system metadata.

Provider: Microsoft-Windows-ReFS-v1
Channel: System

Description

Volume "ObjectName" detected a corruption on file system metadata. It will lose self-healing features.

Message #

Volume "%2" detected a corruption on file system metadata. It will lose self-healing features.

Fields #

Name	Description
`ObjectNameLength` UInt16	—
`ObjectName` UnicodeString	—
`FailureReason` HexInt32	— Known values `%%2304` An Error occured during Logon. `%%2305` The specified user account has expired. `%%2306` The NetLogon component is not active. `%%2307` Account locked out. `%%2308` The user has not been granted the requested logon type at this machine. `%%2309` The specified account's password has expired. `%%2310` Account currently disabled. `%%2311` Account logon time restriction violation. `%%2312` User not allowed to logon at this computer. `%%2313` Unknown user name or bad password. `%%2314` Domain sid inconsistent. `%%2315` Smartcard logon is required and was not used.