Microsoft-Windows-ReFS

53 events across 2 channels

Event IDTitleChannel
4The ReFS volume has been successfully mounted.Operational
5ReFS failed to mount the volume.Operational
6ReFS is mounting the volume.Operational
7ReFS failed to mount the volume.Operational
8ReFS fast tier is filling up for volume.Operational
130The file system structure on volume VolumeId has now been repaired.System
131The file system structure on volume VolumeId cannot be corrected.System
132The file system detected a checksum error and was able to correct it.System
133The file system detected a checksum error and was not able to correct it.System
134The file system was unable to write metadata to the media backing volume …System
135Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS …System
136Volume "VolumeId" was mounted in an older version of Windows.System
137The file system was unable to write metadata to the media backing volume …System
138The file system was unable to open redo log for the media backing volume …System
139The file system detected a global metadata corruption and was able to repair it …System
140The file system detected a global metadata corruption and was not able to repair …System
141The file system has skipped replaying the redo log on volume VolumeId.System
142Summary of disk space usage, since last event.Operational
143The file system detected an invalid metadata page.System
145IO latency summary common data for volume.Operational
146IO latency summary.Operational
147An IO took more than File_name ms to complete.Operational
148A VolumeNameLength failed with ProcessName.Operational
149In the past Failed_reads seconds we had IO failures.Operational
150SMR information summary.Operational
170IO latency summary.Operational
180The file system detected an allocation inconsistency on volume VolumeId.Operational
181The file system detected a block ref count underflow on volume VolumeId.Operational
182Volume VolumeId has changed state.Operational
183Volume VolumeId has failed to change state.Operational
200Stream Snapshot Periodic Data.Operational
201Stream Snapshot Periodic Operation Latencies (Part 1).Operational
202Stream Snapshot Periodic Operation Latencies (Part 2).Operational
237Operational
238Operational
272Operational
273Operational
274Operational
300ReFS volume dismount has started.Operational
301ReFS volume dismount notification sent.Operational
302ReFS volume dismount notification completed.Operational
303ReFS volume was successfully dismounted.Operational
304ReFS dismount failed.Operational
513The file system detected a corruption on a file.System
514The file system detected a corruption on a file.System
515The file system detected a corruption on a folder.System
516The file system detected a corruption on a folder.System
517The file system determined that there were multiple volumes on the given disk so …System
518The file system could not determine if there were multiple volumes on the given …System
519The file system detected a corruption on file system metadata.System
520The file system detected a corruption on file system metadata.System
521Volume "ObjectName" detected a corruption on file system metadata.System
522The file system detected and fixed volume size inconsistency in boot sector of …System

Event ID 4 — The ReFS volume has been successfully mounted.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

The ReFS volume has been successfully mounted.

Message #

The ReFS volume has been successfully mounted.

                         VCB Address: %1
                         Volume GUID: %2
                         Device Name: %4
                         Volume Name: %6
                         Cluster Size Bytes: %7
                         Volume Size Bytes: %8
                         Free Space Bytes: %9
                         Redo Log LCN Count: %10
                         Logical Sector Size Bytes: %11
                         Physical Sector Size Bytes: %12
                         Actual Physical Sector Size Bytes: %13
                         Major Version: %14
                         Minor Version: %15
                         Number of Physical Copies: %16
                         Number of Logical Copies: %17
                         Volume ID for Heat: %18
                         Root Integrity Stream Checksum Type: %19
                         Volume State: %20
                         USN Size: %21
                         Security Descriptor Stream Size: %22
                         Mount Duration (microseconds): %23
                         Debug Version: %24
                         Debugger Enabled: %25
                         SSD Tier Size: %26
                         Read Cache Size: %27
                         Read Cache Line Size: %28
                         Container Rotation Enabled: %29
                         Delete Notification Disabled: %30
                         VCB State Flags: %31
                         VCB State Flags 2: %32
                         Checkpoint Virtual Clock: %33
                         Last Write Time: %34
                         Boot Sector Flags: %35
                         ReFS Data Flags %36
                         Last Shutdown Was Dirty: %37
                         Streams Supported: %38
                         User Streams Available: %39
                         Size of Randomly Writeable Tier: %40
                         Size of SMR Tier: %41
                         Log Restart Start LSN: %42
                         Log Restart Last LSN: %43
                         Log Restart Duration (microseconds): %44

Fields #

NameDescription
VolumeCorrelationId GUID
MountStartTimeUtc FILETIME
VolumeName UnicodeString
IsBootVolume Boolean
DevDriveState UInt32
DeviceName UnicodeString
VendorId UnicodeString
ProductId UnicodeString
ProductRevision UnicodeString
DeviceSerialNumber UnicodeString
BusType UInt32
DeviceGuid GUID
DeviceNumber UInt32
NativeNVMe Boolean
SpaceId GUID
Vcb Pointer
ClusterSizeBytes UInt32
VolumeSizeBytes UInt64
FreeSpaceBytes UInt64
RedoLogLcnCount UInt64
LogicalSectorSizeBytes UInt32
PhysicalSectorSizeBytes UInt32
ActualPhysicalSectorSizeBytes UInt32
MajorVersion UInt8
MinorVersion UInt8
NumberOfPhysicalCopies UInt32
NumberOfLogicalCopies UInt32
VolumeIdForHeat GUID
RootIntegrityStream UInt16
VolumeState HexInt32
UsnSize UInt64
SecurityDescStreamSize UInt64
DurationMicroSec UInt64
DebugVersion Boolean
DebuggerEnabled Boolean
SsdTierSize UInt64
ReadCacheSize UInt64
ReadCacheLineSize UInt32
ContainerRotationEnabled Boolean
DeleteNotificationDisabled Boolean
VcbState HexInt32
VcbState2 HexInt32
CheckpointVirtualClock UInt64
LastWriteTime FILETIME
BootSectorFlags HexInt32
RefsDataFlags HexInt32
LastShutdownWasDirty Boolean
StreamsSupported Boolean
UserStreamsAvailable UInt32
SizeOfRandomlyWriteableTier UInt64
SizeOfSmrTier UInt64
LogRestartStartLsn UInt64
LogRestartLastLsn UInt64
LogRestartDurationMicroSec UInt64
DedupEnabled Boolean
WeakReferenceEnabled Boolean
DirtyStateTrackingEnabled Boolean

Event ID 5 — ReFS failed to mount the volume.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

ReFS failed to mount the volume.

Message #

ReFS failed to mount the volume.
Context: %1
Error: %2

Volume GUID:%3
DeviceName:%5
Volume Name:%7

Fields #

NameDescription
Context PointerVolume Id.
Error
Volume_GUIDVolume name.
DeviceName UnicodeString
Volume_NameDeveloper volume.
VolumeCorrelationId GUID
MountStartTimeUtc FILETIME
VolumeName UnicodeString
IsBootVolume Boolean
DevDriveState UInt32
VendorId UnicodeString
ProductId UnicodeString
ProductRevision UnicodeString
DeviceSerialNumber UnicodeString
BusType UInt32
DeviceGuid GUID
DeviceNumber UInt32
NativeNVMe Boolean
SpaceId GUID
Status HexInt32NTSTATUS reference
StackCount UInt32
Stack Pointer
SourceLine UInt32

Event ID 6 — ReFS is mounting the volume.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

ReFS is mounting the volume.

Message #

ReFS is mounting the volume.
Context: %1
Progress: %2

Fields #

NameDescription
Context Pointer
Progress UInt32
StackCount UInt32
Stack Pointer

Event ID 7 — ReFS failed to mount the volume.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

ReFS failed to mount the volume. Version MajorVersionOnDisk.MinorVersionOnDisk doesn't match expected value MajorVersionExpected.MinorVersionExpected.

Message #

ReFS failed to mount the volume. Version %4.%5 doesn't match expected value %2.%3 
Context: %1

Fields #

NameDescription
Context Pointer
MajorVersionExpected UInt8
MinorVersionExpected UInt8
MajorVersionOnDisk UInt8
MinorVersionOnDisk UInt8

Event ID 8 — ReFS fast tier is filling up for volume.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

ReFS fast tier is filling up for volume.

Message #

ReFS fast tier is filling up for volume.
 Context: %1
FillRatio: %2

Volume GUID:%3
DeviceName:%5
Volume Name:%7

Fields #

NameDescription
Context Pointer
FillRatio UInt32
Volume_GUID
DeviceName UnicodeString
Volume_Name
VolumeGuid GUID
DeviceNameLength UInt16
VolumeNameLength UInt16
VolumeName UnicodeString

Event ID 130 — The file system structure on volume VolumeId has now been repaired.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system structure on volume VolumeId has now been repaired.

Message #

The file system structure on volume %2 has now been repaired.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
RepairDetail UnicodeString
RepairDataLength UInt16
RepairData Binary

Event ID 131 — The file system structure on volume VolumeId cannot be corrected.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system structure on volume VolumeId cannot be corrected.

Message #

The file system structure on volume %2 cannot be corrected.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID

Event ID 132 — The file system detected a checksum error and was able to correct it.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a checksum error and was able to correct it. The name of the file or folder is "ObjectName".

Message #

The file system detected a checksum error and was able to correct it. The name of the file or folder is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 133 — The file system detected a checksum error and was not able to correct it.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a checksum error and was not able to correct it. The name of the file or folder is "ObjectName".

Message #

The file system detected a checksum error and was not able to correct it. The name of the file or folder is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 134 — The file system was unable to write metadata to the media backing volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system was unable to write metadata to the media backing volume VolumeId. A write failed with status "FailureReason" ReFS will take the volume offline. It may be mounted again automatically.

Message #

The file system was unable to write metadata to the media backing volume %2. A write failed with status "%3" ReFS will take the volume offline. It may be mounted again automatically.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID

Event ID 135 — Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status FailureReason.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

Volume VolumeId is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status FailureReason.

Message #

Volume %2 is formatted as ReFS but ReFS is unable to mount it; ReFS encountered status %3.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 136 — Volume "VolumeId" was mounted in an older version of Windows.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

Volume "VolumeId" was mounted in an older version of Windows. Some features may be lost.

Message #

Volume "%2" was mounted in an older version of Windows. Some features may be lost.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 137 — The file system was unable to write metadata to the media backing volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system was unable to write metadata to the media backing volume VolumeId. Log redo failed with status "FailureReason" . The volume is being mounted without the log applied.

Message #

The file system was unable to write metadata to the media backing volume %2. Log redo failed with status "%3" . The volume is being mounted without the log applied.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 138 — The file system was unable to open redo log for the media backing volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system was unable to open redo log for the media backing volume VolumeId. Log redo failed with status "FailureReason" . The volume is being mounted without the log applied.

Message #

The file system was unable to open redo log for the media backing volume %2. Log redo failed with status "%3" . The volume is being mounted without the log applied.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 139 — The file system detected a global metadata corruption and was able to repair it on volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Message #

The file system detected a global metadata corruption and was able to repair it on volume %2. Space may be leaked as part of the repair. If future mounts fail, attempting a readonly volume mount may succeed.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID

Event ID 140 — The file system detected a global metadata corruption and was not able to repair it on volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a global metadata corruption and was not able to repair it on volume VolumeId. Attempting a readonly volume mount may succeed.

Message #

The file system detected a global metadata corruption and was not able to repair it on volume %2. Attempting a readonly volume mount may succeed.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID

Event ID 141 — The file system has skipped replaying the redo log on volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system has skipped replaying the redo log on volume VolumeId. Pending log records will not be applied. ReFS will mount the volume without applying the redo log.

Message #

The file system has skipped replaying the redo log on volume %2. Pending log records will not be applied. ReFS will mount the volume without applying the redo log.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 142 — Summary of disk space usage, since last event.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

Summary of disk space usage, since last event.

Message #

Summary of disk space usage, since last event:

           Available clusters: %8 (%9)
           Reserved clusters: %10 (%11)
           Metadata clusters: %12 (%13)
           Used clusters: %14 (%15)
           
           Volume size: %17
           Bytes per cluster: %18
           
           Volume correlation ID: %1
           Volume name: %3
           Device name: %5
           Space ID: %6
           
           Elapsed seconds: %7

Fields #

NameDescription
Volume_correlation_ID[Summary of disk space usage, since last event] Volume correlation ID.
Volume_name
Device_name[Summary of disk space usage, since last event] Volume name.
Space_ID
Elapsed_seconds[Summary of disk space usage, since last event] Device name.
Available_clusters[Summary of disk space usage, since last event] Space ID.
Reserved_clusters[Summary of disk space usage, since last event] Elapsed seconds.
Metadata_clusters[Summary of disk space usage, since last event] Available clusters.
Used_clusters
Volume_size[Summary of disk space usage, since last event] Reserved clusters.
Bytes_per_cluster
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
SpaceId GUID
ElapsedSeconds UInt64
AvailableClusters Int64
AvailabeSpaceStr AnsiString
ReservedClusters Int64
ReservedSizeStr AnsiString
MetadataTotalClusters Int64
MetadataSizeStr AnsiString
UsedClusters Int64
UsedSizeStr AnsiString
VolumeSizeInBytes Int64
VolumeSizeStr AnsiString
ClusterSize UInt32
MappedClusters Int64
MappedSpaceStr AnsiString
AvailableMappedClusters Int64
AvailableMappedSpaceStr AnsiString
SlabSizeInBytes UInt64
SlabSizeStr AnsiString
SlabOffsetDeltaInBytes UInt64
SlabsMapped UInt32
SlabsMappedDelta Int32
TotalSlabsCount UInt32
MapCountSinceMount Int32
IntervalMapCount Int32
MapFailureCountSinceMount Int32
IntervalMapFailureCount Int32
MappedBytesSinceMount Int64
MappedBytesSinceMountStr AnsiString
IntervalMappedBytes Int64
IntervalMappedBytesStr AnsiString
UnmapCountSinceMount Int32
IntervalUnmapCount Int32
UnmapFailureCountSinceMount Int32
IntervalUnmapFailureCount Int32
UnmappedBytesSinceMount Int64
UnmappedBytesSinceMountStr AnsiString
IntervalUnmappedBytes Int64
IntervalUnmappedBytesStr AnsiString
DedupEnabled Boolean
WeakReferenceEnabled Boolean
DirtyStateTrackingEnabled Boolean

Event ID 143 — The file system detected an invalid metadata page.

Provider
Microsoft-Windows-ReFS
Channel
System

Description

The file system detected an invalid metadata page. The name of the file or folder is "ObjectName".

Message #

The file system detected an invalid metadata page. The name of the file or folder is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
ActionTaken UInt32
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 145 — IO latency summary common data for volume.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

IO latency summary common data for volume.

Message #

IO latency summary common data for volume:

           Volume Id: %1
           Volume name: %3

           Tier Index %5
           Max Acceptable IO Latency: %6 ms
           Read/Write latency buckets (ns): [%7, %8, %9, %10, %11, %12, %13]
           Trim latency buckets (ns): [%14, %15, %16, %17, %18, %19, %20]
           Flush latency buckets (ns): [%21, %22, %23, %24, %25, %26, %27]

Fields #

NameDescription
Volume_Id[IO latency summary common data for volume] Volume Id.
Volume_name
Max_Acceptable_IO_Latency[IO latency summary common data for volume] Volume name.
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
IsBootVolume Boolean
TierIndex UInt32
MaxLatencyMs UInt64
ReadWriteLatencyBucket1 Int64
ReadWriteLatencyBucket2 Int64
ReadWriteLatencyBucket3 Int64
ReadWriteLatencyBucket4 Int64
ReadWriteLatencyBucket5 Int64
ReadWriteLatencyBucket6 Int64
ReadWriteLatencyBucket7 Int64
TrimLatencyBucket1 Int64
TrimLatencyBucket2 Int64
TrimLatencyBucket3 Int64
TrimLatencyBucket4 Int64
TrimLatencyBucket5 Int64
TrimLatencyBucket6 Int64
TrimLatencyBucket7 Int64
FlushLatencyBucket1 Int64
FlushLatencyBucket2 Int64
FlushLatencyBucket3 Int64
FlushLatencyBucket4 Int64
FlushLatencyBucket5 Int64
FlushLatencyBucket6 Int64
FlushLatencyBucket7 Int64

Event ID 146 — IO latency summary.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

IO latency summary.

Message #

IO latency summary:

           Version: %1
           Volume Id: %2
           Volume name: %4
           Tier index: %6

           Max Acceptable IO Latency: %7 ms

           Read/Write latency buckets (ns): [%8, %9, %10, %11, %12, %13, %14]
           Trim latency buckets (ns): [%15, %16, %17, %18, %19, %20, %21]
           Flush latency buckets (ns): [%22, %23, %24, %25, %26, %27, %28]

           Interval duration: %30 us

           Non-cached reads:
                     IO count: %31
                     Total bytes: %32
                     Avg latency: %33 ns

           Non-cached writes: 
                     IO count: %34
                     Total bytes: %35
                     Avg latency: %36 ns

           File flushes: 
                     IO count: %37
                     Avg latency: %38 ns

           Directory flushes: 
                     IO count: %39
                     Avg latency: %40 ns

           Volume flushes: 
                     IO count: %41
                     Avg latency: %42 ns

           File level trims: 
                     IO count: %43
                     Total bytes: %44
                     Extents count: %45
                     Avg latency: %46 ns

           Volume trims: 
                     IO count: %47
                     Total bytes: %48
                     Extents count: %49                     Avg latency: %50 ns

 For more details see the details tab.

Fields #

NameDescription
Version UInt32[IO latency summary] Version.
Volume_Id[IO latency summary] Volume Id.
Volume_name
Tier_index[IO latency summary] Volume name.
Max_Acceptable_IO_Latency
Interval_duration[IO latency summary] Tier index.
IO_count[IO latency summary] Max Acceptable IO Latency.
Total_bytes
Avg_latency
IO_count
Total_bytes
Avg_latency
IO_count
Avg_latency
IO_count
Avg_latency
IO_count
Avg_latency
IO_count
Total_bytes
Extents_count
Avg_latency
IO_count
Total_bytes
Extents_count
Avg_latency
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
IsBootVolume Boolean
TierIndex UInt32
MaxLatencyMs UInt64
ReadWriteLatencyBucket1 Int64
ReadWriteLatencyBucket2 Int64
ReadWriteLatencyBucket3 Int64
ReadWriteLatencyBucket4 Int64
ReadWriteLatencyBucket5 Int64
ReadWriteLatencyBucket6 Int64
ReadWriteLatencyBucket7 Int64
TrimLatencyBucket1 Int64
TrimLatencyBucket2 Int64
TrimLatencyBucket3 Int64
TrimLatencyBucket4 Int64
TrimLatencyBucket5 Int64
TrimLatencyBucket6 Int64
TrimLatencyBucket7 Int64
FlushLatencyBucket1 Int64
FlushLatencyBucket2 Int64
FlushLatencyBucket3 Int64
FlushLatencyBucket4 Int64
FlushLatencyBucket5 Int64
FlushLatencyBucket6 Int64
FlushLatencyBucket7 Int64
HighIoLatencyCount UInt32
IntervalDurationUs Int64
NCReadIOCount UInt64
NCReadTotalBytes UInt64
NCReadAvgLatencyNs UInt64
NCWriteIOCount UInt64
NCWriteTotalBytes UInt64
NCWriteAvgLatencyNs UInt64
FileFlushCount UInt64
FileFlushAvgLatencyNs UInt64
DirectoryFlushCount UInt64
DirectoryFlushAvgLatencyNs UInt64
VolumeFlushCount UInt64
VolumeFlushAvgLatencyNs UInt64
FileLevelTrimCount UInt64
FileLevelTrimTotalBytes UInt64
FileLevelTrimExtentsCount UInt64
FileLevelTrimAvgLatencyNs UInt64
VolumeTrimCount UInt64
VolumeTrimTotalBytes UInt64
VolumeTrimExtentsCount UInt64
VolumeTrimAvgLatencyNs UInt64
IoBucketsCount UInt8
TotalBytesBucketsCount UInt8
ExtentsBucketsCount UInt8
IoCount UInt64
TotalLatencyUs UInt64
TotalBytes UInt64
TrimExtentsCount UInt64
IoTypeIndex UInt16

Event ID 147 — An IO took more than File_name ms to complete.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

An IO took more than File_name ms to complete.

Message #

An IO took more than %6 ms to complete:

           Process Id: %7
           Process name: %8
           File name: %10
           File offset: %13
           IO Type: %11
           IO Size: %12 bytes
           %16 cluster(s) starting at cluster %15
           Latency: %14 ms

           Volume Id: %1
           Volume name: %3
           Tier index: %5

Fields #

NameDescription
Volume_Id
Volume_name
Tier_index
Process_Id
Process_nameTier index.
File_name
IO_TypeProcess Id.
IO_SizeProcess name.
File_offset
LatencyFile name.
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
IsBootVolume Boolean
TierIndex UInt32
MaxLatencyMs UInt64
ProcessId UInt32
ProcessName AnsiString
FileNameLength UInt32
FileName UnicodeString
FileIdHigh HexInt64
FileIdLow HexInt64
IoType UInt16
IoTypeStr UnicodeString
LatencyMs UInt64

Event ID 148 — A VolumeNameLength failed with ProcessName.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

A VolumeNameLength failed with ProcessName.

Message #

A %10 failed with %15.

           Process Id: %6
           Process name: %7
           File name: %9
           IO Size: %11 bytes
           File offset: %12
           %14 cluster(s) starting at cluster %13

           Volume Id: %1
           Volume name: %3
           Tier index: %5

Fields #

NameDescription
Volume_Id
Volume_name
Tier_index
Process_Id
Process_nameTier index.
File_nameProcess Id.
IO_SizeProcess name.
File_offset
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
IsBootVolume Boolean
TierIndex UInt32
ProcessId UInt32
ProcessName AnsiString
FileNameLength UInt32
FileName UnicodeString
FileIdHigh HexInt64
FileIdLow HexInt64
IoType UInt32
IoSize UInt32
FileOffset UInt64
StartingLcn UInt64
ClustersCount UInt32
FailureStatus HexInt32

Event ID 149 — In the past Failed_reads seconds we had IO failures.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

In the past Failed_reads seconds we had IO failures.

Message #

In the past %5 seconds we had IO failures.

           High latency IO count: %6
           Failed writes: %7
           Failed reads: %8
           Volume Id: %1
           Volume name: %3

Fields #

NameDescription
Volume_Id
Volume_name
High_latency_IO_count
Failed_writes
Failed_reads
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
IsBootVolume Boolean
SecondsElapsed UInt32
HighLatencyCount UInt32
FailedWriteCount UInt32
FailedReadCount UInt32
BadClusterHotfixCount UInt32
ValuesCount UInt32
HighLatencyArray UInt32
FailedWriteArray UInt32
FailedReadArray UInt32
BadClusterHotfixArray UInt32
StatusArray HexInt32
TableIndexArray UInt32

Event ID 150 — SMR information summary.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

SMR information summary.

Message #

SMR information summary:

           Volume Id: %1
           Volume name: %3

           Sample Duration: %4

           Free Space Minimum (Randomly-Writable Tier): %5
           Free Space Maximum (Randomly-Writable Tier): %6
           Free Space Average (Randomly-Writable Tier): %7

           Free Space Minimum (SMR Tier): %8
           Free Space Maximum (SMR Tier): %9
           Free Space Average (SMR Tier): %10

           Usable Free Space Minimum (SMR Tier): %11
           Usable Free Space Maximum (SMR Tier): %12
           Usable Free Space Average (SMR Tier): %13

           Write Serialization Aborted Writes: %14
           Write Serialization Events: %15
           Write Serialization Latency Average: %16
           Write Serialization Latency Maximum: %17
           Write Serialization Blocked Events: %18
           Write Serialization Blocked Latency Average: %19

           Start Garbage Collection Calls Invoked: %20
           Start Garbage Collection Calls Failed: %21
           Start Garbage Collection Full Speed Calls Invoked: %22
           Start Garbage Collection Full Speed Calls Failed: %23
           Pause Garbage Collection Calls Invoked: %24
           Pause Garbage Collection Calls Failed: %25
           Stop Garbage Collection Calls Invoked: %26
           Stop Garbage Collection Calls Failed: %27

           Full SMR Band Cluster Allocations: %28
           Shared SMR Band Cluster Allocations: %29

           Garbage Collection Read Latency Total: %30
           Garbage Collection Read Latency Average: %31
           Garbage Collection Read Latency Maximum: %32
           Garbage Collection Total Read IOs: %33
           Garbage Collection Write Latency Total: %34
           Garbage Collection Write Latency Average: %35
           Garbage Collection Write Latency Maximum: %36
           Garbage Collection Total Write IOs: %37
           Disk Full Requires Garbage Collection: %38

           SMR Zone Full Events: %39
           CMR Zone Full Events: %40

           Invalid Sector Errors: %41
           IO Device Errors: %42
           IO Unaligned Write Errors: %43
           Write Errors: %44
           Read Errors: %45
           SMR Write-Head Requeries: %46

Fields #

NameDescription
VolumeCorrelationId GUID
VolumeNameLength UInt32
VolumeName UnicodeString
SampleDuration UInt64
FreeSpaceInRandomlyWriteableTierMin UInt64
FreeSpaceInRandomlyWriteableTierMax UInt64
FreeSpaceInRandomlyWriteableTierAvg UInt64
FreeSpaceInSMRTierMin UInt64
FreeSpaceInSMRTierMax UInt64
FreeSpaceInSMRTierAvg UInt64
UsableFreeSpaceInSMRTierMin UInt64
UsableFreeSpaceInSMRTierMax UInt64
UsableFreeSpaceInSMRTierAvg UInt64
WriteSerializationAbortedWrites UInt64
WriteSerializationEvents UInt64
WriteSerializationLatencyAvg UInt64
WriteSerializationLatencyMax UInt64
WriteSerializationBlockedEvents UInt64
WriteSerializationBlockedLatencyAvg UInt64
StartGCCallsInvoked UInt64
StartGCCallsFailed UInt64
StartGCFullSpeedCallsInvoked UInt64
StartGCFullSpeedCallsFailed UInt64
PauseGCCallsInvoked UInt64
PauseGCCallsFailed UInt64
StopGCCallsInvoked UInt64
StopGCCallsFailed UInt64
FullSMRBandClusterAllocations UInt64
SharedSMRBandClusterAllocations UInt64
GCReadLatencyTotal UInt64
GCReadLatencyAvg UInt64
GCReadLatencyMax UInt64
GCTotalReadIOs UInt64
GCWriteLatencyTotal UInt64
GCWriteLatencyAvg UInt64
GCWriteLatencyMax UInt64
GCTotalWriteIOs UInt64
DiskFullRequiresGC UInt64
SMRZoneFull UInt64
CMRZoneFull UInt64
InvalidSectorErrors UInt64
IoDeviceErrors UInt64
IoUnalignedWrite UInt64
WriteErrors UInt64
ReadErrors UInt64
SMRWriteHeadRequeries UInt64

Event ID 170 — IO latency summary.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

IO latency summary.

Message #

IO latency summary:

           Volume Id: %1
           Volume name: %3
           
           IO type: %8
           
           Interval duration: %6
           
           Max Acceptable IO Latency: %10
           High Latency IOs: %11
           
           IO count: %12
           Avg IOPS: %13
           Avg latency: %15
           
           Latency buckets: [%16]
           IO count buckets: [%17, %18, %19, %20, %21, %22, %23, %24, %25, %26, %27, %28]
           Total time buckets (ns): [%29, %30, %31, %32, %33, %34, %35, %36, %37, %38, %39, %40]
           
           For more details see the details tab.

Fields #

NameDescription
Volume_Id[IO latency summary] Volume Id.
Volume_name
Interval_duration[IO latency summary] Volume name.
IO_type
Max_Acceptable_IO_Latency[IO latency summary] Developer volume.
High_Latency_IOs[IO latency summary] Device Name.
IO_count[IO latency summary] Vendor ID.
Avg_IOPS[IO latency summary] Product ID.
Avg_latency[IO latency summary] Product Revision.
VolumeCorrelationId GUID
MountStartTimeUtc FILETIME
VolumeName UnicodeString
IsBootVolume Boolean
DevDriveState UInt32
DeviceName UnicodeString
VendorId UnicodeString
ProductId UnicodeString
ProductRevision UnicodeString
DeviceSerialNumber UnicodeString
BusType UInt32
DeviceGuid GUID
DeviceNumber UInt32
NativeNVMe Boolean
SpaceId GUID
TierIndex UInt32
SummaryId UInt64
IoTypeStr UnicodeString
IntervalDurationMs UInt64
IntervalDurationStr UnicodeString
HighLatencyLevelMs UInt64
HighLatencyLevelStr UnicodeString
HighLatencyCount UInt32
TotalCount UInt64
TotalTimeNs UInt64
AverageOps UInt64
AverageLatencyNs UInt64
AverageLatencyStr UnicodeString
AverageLatencyLevelNs UInt64
MedianLatencyLevelNs UInt64
MedianLatencyLevelStr UnicodeString
MaxLatencyNs UInt64
MaxLatencyStr UnicodeString
MaxLatencyLevelNs UInt64
LatencyBuckets UnicodeString
IoCount0 UInt64
IoCount1 UInt64
IoCount2 UInt64
IoCount3 UInt64
IoCount4 UInt64
IoCount5 UInt64
IoCount6 UInt64
IoCount7 UInt64
IoCount8 UInt64
IoCount9 UInt64
IoCount10 UInt64
IoCount11 UInt64
IoCount12 UInt64
IoCount13 UInt64
IoCount14 UInt64
IoCount15 UInt64
TotalTimeNs0 UInt64
TotalTimeNs1 UInt64
TotalTimeNs2 UInt64
TotalTimeNs3 UInt64
TotalTimeNs4 UInt64
TotalTimeNs5 UInt64
TotalTimeNs6 UInt64
TotalTimeNs7 UInt64
TotalTimeNs8 UInt64
TotalTimeNs9 UInt64
TotalTimeNs10 UInt64
TotalTimeNs11 UInt64
TotalTimeNs12 UInt64
TotalTimeNs13 UInt64
TotalTimeNs14 UInt64
TotalTimeNs15 UInt64
TotalBytes UInt64
AverageBps UInt64
TotalBytes0 UInt64
TotalBytes1 UInt64
TotalBytes2 UInt64
TotalBytes3 UInt64
TotalBytes4 UInt64
TotalBytes5 UInt64
TotalBytes6 UInt64
TotalBytes7 UInt64
TotalBytes8 UInt64
TotalBytes9 UInt64
TotalBytes10 UInt64
TotalBytes11 UInt64
TotalBytes12 UInt64
TotalBytes13 UInt64
TotalBytes14 UInt64
TotalBytes15 UInt64
TotalExtents UInt64
ExtentsCountArrayLength UInt16
ExtentsCountArray UInt64

Event ID 180 — The file system detected an allocation inconsistency on volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

The file system detected an allocation inconsistency on volume VolumeId.

Message #

The file system detected an allocation inconsistency on volume %2.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID
Count Int64
Result Int64
RegionNonCompactibleAllocated HexInt64
RegionStartOfRange HexInt64
RegionCountOfRange HexInt64
RegionFlags HexInt32
RegionFreeCount HexInt32
RegionFreeBits HexInt32
RecentlyDeallocatedTrimBits HexInt32

Event ID 181 — The file system detected a block ref count underflow on volume VolumeId.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

The file system detected a block ref count underflow on volume VolumeId.

Message #

The file system detected a block ref count underflow on volume %2.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
SourceFile HexInt32
SourceLine UInt16
SourceTag UInt32
SpaceId GUID
Count Int64
Pos Int64
StartOfRange HexInt64
CountOfRange HexInt64
Start HexInt64
End HexInt64

Event ID 182 — Volume VolumeId has changed state.

Provider
Microsoft-Windows-ReFS
Channel
Operational

Description

Volume VolumeId has changed state.

Message #

Volume %2 has changed state.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID
DedupEnabled Int32
WeakReferenceEnabled Int32
DirtyStateTrackingEnabled Int32
Status HexInt32NTSTATUS reference

Event ID 183 — Volume VolumeId has failed to change state.

Provider
Microsoft-Windows-ReFS
Channel
Operational

Description

Volume VolumeId has failed to change state.

Message #

Volume %2 has failed to change state.

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID
DedupEnabled Int32
WeakReferenceEnabled Int32
DirtyStateTrackingEnabled Int32
Status HexInt32NTSTATUS reference

Event ID 200 — Stream Snapshot Periodic Data.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

Stream Snapshot Periodic Data.

Message #

Stream Snapshot Periodic Data:

                         Volume GUID: %1
                         Device Name: %3
                         Event Group Tag: %4

                         Create Operation Count: %5
                         Create Operation Total Duration (us): %6
                         Create Operation Maximum Duration (us): %7

                         List Operation Count: %8
                         List Operation Total Duration (us): %9
                         List Operation Maximum Duration (us): %10

                         Query Deltas Operation Count: %11
                         Query Deltas Operation Total Duration (us): %12
                         Query Deltas Operation Maximum Duration (us): %13

                         Revert Operation Count: %14
                         Revert Operation Total Duration (us): %15
                         Revert Operation Maximum Duration (us): %16

                         Set Shadow B-Tree Operation Count: %17
                         Set Shadow B-Tree OperationTotal Duration (us): %18
                         Set Shadow B-Tree Operation Maximum Duration (us): %19

                         Clear Shadow B-Tree Operation Count: %20
                         Clear Shadow B-Tree OperationTotal Duration (us): %21
                         Clear Shadow B-Tree Operation Maximum Duration (us): %22

                         Error Count: %23

Fields #

NameDescription
VolumeGuid GUID
DeviceNameLength UInt16
DeviceName UnicodeString
EventGroupTag Int64
StreamSnapshotCreateOperationCount UInt64
StreamSnapshotCreateOperationDurationMicrosSec UInt64
StreamSnapshotCreateOperationMaxDurationMicroSec UInt64
StreamSnapshotListOperationCount UInt64
StreamSnapshotListOperationDurationMicrosSec UInt64
StreamSnapshotListOperationMaxDurationMicroSec UInt64
StreamSnapshotQueryDeltasOperationCount UInt64
StreamSnapshotQueryDeltasOperationDurationMicrosSec UInt64
StreamSnapshotQueryDeltasOperationMaxDurationMicroSec UInt64
StreamSnapshotRevertOperationCount UInt64
StreamSnapshotRevertOperationDurationMicrosSec UInt64
StreamSnapshotRevertOperationMaxDurationMicroSec UInt64
StreamSnapshotSetShadowBTreeOperationCount UInt64
StreamSnapshotSetShadowBTreeOperationDurationMicroSec UInt64
StreamSnapshotSetShadowBTreeOperationMaxDurationMicroSec UInt64
StreamSnapshotClearShadowBTreeOperationCount UInt64
StreamSnapshotClearShadowBTreeOperationDurationMicroSec UInt64
StreamSnapshotClearShadowBTreeOperationMaxDurationMicroSec UInt64
StreamSnapshotErrorCount UInt64

Event ID 201 — Stream Snapshot Periodic Operation Latencies (Part 1).

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

Stream Snapshot Periodic Operation Latencies (Part 1).

Message #

Stream Snapshot Periodic Operation Latencies (Part 1):

                         Volume GUID: %1
                         Device Name: %3
                         Event Group Tag: %4

                         LatencyBucketValues:  [%6]

                         Create Operation Counts: [%7, %8, %9, %10, %11, %12, %13, %14, %15, %16, %17, %18, %19, %20, %21]
                         Create Operation Total Duration: [%22, %23, %24, %25, %26, %27, %28, %29, %30, %31, %32, %33, %34, %35, %36]

                         List Operation Counts: [%37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49, %50, %51]
                         List Operation Total Duration: [%52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65, %66]

                         Revert Operation Counts: [%67, %68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81]
                         Revert Deltas Operation Total Duration: [%82, %83, %84, %85, %86, %87, %88, %89, %90, %91, %92, %93, %94, %95, %96]

Fields #

NameDescription
Volume_GUID[Stream Snapshot Periodic Operation Latencies (Part 1)] Volume GUID.
Device_Name
Event_Group_Tag[Stream Snapshot Periodic Operation Latencies (Part 1)] Device Name.
VolumeGuid GUID
DeviceNameLength UInt16
DeviceName UnicodeString
EventGroupTag Int64
BucketLabelsLength UInt16
BucketLabels UnicodeString
StreamSnapshotCreateOperationCountsBucket1 Int64
StreamSnapshotCreateOperationCountsBucket2 Int64
StreamSnapshotCreateOperationCountsBucket3 Int64
StreamSnapshotCreateOperationCountsBucket4 Int64
StreamSnapshotCreateOperationCountsBucket5 Int64
StreamSnapshotCreateOperationCountsBucket6 Int64
StreamSnapshotCreateOperationCountsBucket7 Int64
StreamSnapshotCreateOperationCountsBucket8 Int64
StreamSnapshotCreateOperationCountsBucket9 Int64
StreamSnapshotCreateOperationCountsBucket10 Int64
StreamSnapshotCreateOperationCountsBucket11 Int64
StreamSnapshotCreateOperationCountsBucket12 Int64
StreamSnapshotCreateOperationCountsBucket13 Int64
StreamSnapshotCreateOperationCountsBucket14 Int64
StreamSnapshotCreateOperationCountsBucket15 Int64
StreamSnapshotCreateOperationLatencyBucket1 Int64
StreamSnapshotCreateOperationLatencyBucket2 Int64
StreamSnapshotCreateOperationLatencyBucket3 Int64
StreamSnapshotCreateOperationLatencyBucket4 Int64
StreamSnapshotCreateOperationLatencyBucket5 Int64
StreamSnapshotCreateOperationLatencyBucket6 Int64
StreamSnapshotCreateOperationLatencyBucket7 Int64
StreamSnapshotCreateOperationLatencyBucket8 Int64
StreamSnapshotCreateOperationLatencyBucket9 Int64
StreamSnapshotCreateOperationLatencyBucket10 Int64
StreamSnapshotCreateOperationLatencyBucket11 Int64
StreamSnapshotCreateOperationLatencyBucket12 Int64
StreamSnapshotCreateOperationLatencyBucket13 Int64
StreamSnapshotCreateOperationLatencyBucket14 Int64
StreamSnapshotCreateOperationLatencyBucket15 Int64
StreamSnapshotListOperationCountsBucket1 Int64
StreamSnapshotListOperationCountsBucket2 Int64
StreamSnapshotListOperationCountsBucket3 Int64
StreamSnapshotListOperationCountsBucket4 Int64
StreamSnapshotListOperationCountsBucket5 Int64
StreamSnapshotListOperationCountsBucket6 Int64
StreamSnapshotListOperationCountsBucket7 Int64
StreamSnapshotListOperationCountsBucket8 Int64
StreamSnapshotListOperationCountsBucket9 Int64
StreamSnapshotListOperationCountsBucket10 Int64
StreamSnapshotListOperationCountsBucket11 Int64
StreamSnapshotListOperationCountsBucket12 Int64
StreamSnapshotListOperationCountsBucket13 Int64
StreamSnapshotListOperationCountsBucket14 Int64
StreamSnapshotListOperationCountsBucket15 Int64
StreamSnapshotListOperationLatencyBucket1 Int64
StreamSnapshotListOperationLatencyBucket2 Int64
StreamSnapshotListOperationLatencyBucket3 Int64
StreamSnapshotListOperationLatencyBucket4 Int64
StreamSnapshotListOperationLatencyBucket5 Int64
StreamSnapshotListOperationLatencyBucket6 Int64
StreamSnapshotListOperationLatencyBucket7 Int64
StreamSnapshotListOperationLatencyBucket8 Int64
StreamSnapshotListOperationLatencyBucket9 Int64
StreamSnapshotListOperationLatencyBucket10 Int64
StreamSnapshotListOperationLatencyBucket11 Int64
StreamSnapshotListOperationLatencyBucket12 Int64
StreamSnapshotListOperationLatencyBucket13 Int64
StreamSnapshotListOperationLatencyBucket14 Int64
StreamSnapshotListOperationLatencyBucket15 Int64
StreamSnapshotRevertOperationCountsBucket1 Int64
StreamSnapshotRevertOperationCountsBucket2 Int64
StreamSnapshotRevertOperationCountsBucket3 Int64
StreamSnapshotRevertOperationCountsBucket4 Int64
StreamSnapshotRevertOperationCountsBucket5 Int64
StreamSnapshotRevertOperationCountsBucket6 Int64
StreamSnapshotRevertOperationCountsBucket7 Int64
StreamSnapshotRevertOperationCountsBucket8 Int64
StreamSnapshotRevertOperationCountsBucket9 Int64
StreamSnapshotRevertOperationCountsBucket10 Int64
StreamSnapshotRevertOperationCountsBucket11 Int64
StreamSnapshotRevertOperationCountsBucket12 Int64
StreamSnapshotRevertOperationCountsBucket13 Int64
StreamSnapshotRevertOperationCountsBucket14 Int64
StreamSnapshotRevertOperationCountsBucket15 Int64
StreamSnapshotRevertOperationLatencyBucket1 Int64
StreamSnapshotRevertOperationLatencyBucket2 Int64
StreamSnapshotRevertOperationLatencyBucket3 Int64
StreamSnapshotRevertOperationLatencyBucket4 Int64
StreamSnapshotRevertOperationLatencyBucket5 Int64
StreamSnapshotRevertOperationLatencyBucket6 Int64
StreamSnapshotRevertOperationLatencyBucket7 Int64
StreamSnapshotRevertOperationLatencyBucket8 Int64
StreamSnapshotRevertOperationLatencyBucket9 Int64
StreamSnapshotRevertOperationLatencyBucket10 Int64
StreamSnapshotRevertOperationLatencyBucket11 Int64
StreamSnapshotRevertOperationLatencyBucket12 Int64
StreamSnapshotRevertOperationLatencyBucket13 Int64
StreamSnapshotRevertOperationLatencyBucket14 Int64
StreamSnapshotRevertOperationLatencyBucket15 Int64

Event ID 202 — Stream Snapshot Periodic Operation Latencies (Part 2).

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Description

Stream Snapshot Periodic Operation Latencies (Part 2).

Message #

Stream Snapshot Periodic Operation Latencies (Part 2):

                         Volume GUID: %1
                         Device Name: %3
                         Event Group Tag: %4

                         LatencyBucketValues:  [%6]

                         Query Deltas Operation Counts: [%7, %8, %9, %10, %11, %12, %13, %14, %15, %16, %17, %18, %19, %20, %21]
                         Query Deltas Operation Total Duration: [%22, %23, %24, %25, %26, %27, %28, %29, %30, %31, %32, %33, %34, %35, %36]

                         Set Shadow B-Tree Operation Counts: [%37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49, %50, %51]
                         Set Shadow B-Tree Operation Total Duration: [%52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65, %66]

                         Clear Shadow B-Tree Operation Counts: [%67, %68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81]
                         Clear Shadow B-Tree Operation Total Duration: [%82, %83, %84, %85, %86, %87, %88, %89, %90, %91, %92, %93, %94, %95, %96]

Fields #

NameDescription
Volume_GUID[Stream Snapshot Periodic Operation Latencies (Part 2)] Volume GUID.
Device_Name
Event_Group_Tag[Stream Snapshot Periodic Operation Latencies (Part 2)] Device Name.
VolumeGuid GUID
DeviceNameLength UInt16
DeviceName UnicodeString
EventGroupTag Int64
BucketLabelsLength UInt16
BucketLabels UnicodeString
StreamSnapshotQueryDeltasOperationCountsBucket1 Int64
StreamSnapshotQueryDeltasOperationCountsBucket2 Int64
StreamSnapshotQueryDeltasOperationCountsBucket3 Int64
StreamSnapshotQueryDeltasOperationCountsBucket4 Int64
StreamSnapshotQueryDeltasOperationCountsBucket5 Int64
StreamSnapshotQueryDeltasOperationCountsBucket6 Int64
StreamSnapshotQueryDeltasOperationCountsBucket7 Int64
StreamSnapshotQueryDeltasOperationCountsBucket8 Int64
StreamSnapshotQueryDeltasOperationCountsBucket9 Int64
StreamSnapshotQueryDeltasOperationCountsBucket10 Int64
StreamSnapshotQueryDeltasOperationCountsBucket11 Int64
StreamSnapshotQueryDeltasOperationCountsBucket12 Int64
StreamSnapshotQueryDeltasOperationCountsBucket13 Int64
StreamSnapshotQueryDeltasOperationCountsBucket14 Int64
StreamSnapshotQueryDeltasOperationCountsBucket15 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket1 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket2 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket3 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket4 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket5 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket6 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket7 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket8 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket9 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket10 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket11 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket12 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket13 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket14 Int64
StreamSnapshotQueryDeltasOperationLatencyBucket15 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket1 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket2 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket3 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket4 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket5 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket6 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket7 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket8 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket9 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket10 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket11 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket12 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket13 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket14 Int64
StreamSnapshotSetShadowBTreeOperationCountsBucket15 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket1 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket2 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket3 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket4 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket5 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket6 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket7 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket8 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket9 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket10 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket11 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket12 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket13 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket14 Int64
StreamSnapshotSetShadowBTreeOperationLatencyBucket15 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket1 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket2 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket3 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket4 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket5 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket6 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket7 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket8 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket9 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket10 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket11 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket12 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket13 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket14 Int64
StreamSnapshotClearShadowBTreeOperationCountsBucket15 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket1 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket2 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket3 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket4 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket5 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket6 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket7 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket8 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket9 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket10 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket11 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket12 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket13 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket14 Int64
StreamSnapshotClearShadowBTreeOperationLatencyBucket15 Int64

Event ID 237 —

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Fields #

NameDescription
SqmType UInt32
SqmSessionGuid GUID
SqmID UInt32
SqmDWORDDatapointValue UInt32

Event ID 238 —

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Fields #

NameDescription
SqmType UInt32
SqmSessionGuid GUID
SqmID UInt32
SqmStringDatapointValue UnicodeString

Event ID 272 —

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Fields #

NameDescription
SqmType UInt32
SqmSessionGuid GUID
SqmID UInt32
SqmProcessHashValue UInt32
SqmStreamRowLength UInt32
SqmStreamRow UInt16

Event ID 273 —

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Fields #

NameDescription
SqmType UInt32
SqmSessionGuid GUID
SqmID UInt32
SqmProcessHashValue UInt32
SqmStreamRowLength UInt32
SqmStreamEntriesSize UInt32
SqmStreamEntries Binary
SqmStreamFlags UInt32

Event ID 274 —

Provider
Microsoft-Windows-ReFS
Channel
Operational
Opcode
Info

Fields #

NameDescription
SqmType UInt32
SqmSessionGuid GUID
SqmID UInt32
SqmDWORD64DatapointValue UInt64

Event ID 300 — ReFS volume dismount has started.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Task
Volumedismount
Opcode
Start

Description

ReFS volume dismount has started.

Message #

ReFS volume dismount has started.

           Volume correlation Id: %1
           Volume name: %3
           Device name: %5
           
           Process Id: %7
           Process name: %8
           
           Reason: %9
           
           Number of dirty metadata pages: %10
           Number of dirty table list entries: %11

Fields #

NameDescription
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
Vcb Pointer
ProcessId UInt32
ProcessName AnsiString
DismountReason AnsiString
NumberOfDirtyMetadataPages Int64
NumberOfDirtyTableListEntries Int32

Event ID 301 — ReFS volume dismount notification sent.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Task
Volumedismount
Opcode
Suspend

Description

ReFS volume dismount notification sent.

Message #

ReFS volume dismount notification sent.

           Volume correlation Id: %1
           Volume name: %3
           Device name: %5

Fields #

NameDescription
Volume_correlation_Id
Volume_name
Device_name
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
Vcb Pointer

Event ID 302 — ReFS volume dismount notification completed.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Task
Volumedismount
Opcode
Resume

Description

ReFS volume dismount notification completed.

Message #

ReFS volume  dismount notification completed.

           Volume correlation Id: %1
           Volume name: %3
           Device name: %5
           
           Dismount notification duration: %7

Fields #

NameDescription
Volume_correlation_Id
Volume_name
Device_name
Dismount_notification_duration
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
Vcb Pointer
DismountNotificationDurationStr UnicodeString
DismountNotificationDurationMs UInt64

Event ID 303 — ReFS volume was successfully dismounted.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Task
Volumedismount
Opcode
Stop

Description

ReFS volume was successfully dismounted.

Message #

ReFS volume was successfully dismounted.

           Volume correlation Id: %1
           Volume name: %3
           Device name: %5
           
           Process Id: %7
           Process name: %8
           
           Reason: %9
           
           Dismount notification duration: %10
           Dismount duration: %12
           
           Number of dirty metadata pages when dismount began: %14
           Number of dirty table list entries when dismount began: %15
           Number of pages dirtied during dismount: %16

Fields #

NameDescription
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
Vcb Pointer
ProcessId UInt32
ProcessName AnsiString
DismountReason AnsiString
DismountNotificationDurationStr UnicodeString
DismountNotificationDurationMs UInt64
DismountDurationStr UnicodeString
DismountDurationMs UInt64
NumberOfDirtyMetadataPagesOnDismountBegin Int64
NumberOfDirtyTableListEntriesOnDismountBegin Int32
PagesDirtiedDuringDismount Int64

Event ID 304 — ReFS dismount failed.

Provider
Microsoft-Windows-ReFS
Channel
Operational
Task
Volumedismount
Opcode
Stop

Description

ReFS dismount failed.

Message #

ReFS dismount failed.

           Volume correlation Id: %1
           Volume name: %3
           Device name: %5
           
           Error: %7

Fields #

NameDescription
Volume_correlation_Id
Volume_name
Device_name
Error
VolumeCorrelationId GUID
VolumeNameLength UInt16
VolumeName UnicodeString
DeviceNameLength UInt16
DeviceName UnicodeString
Vcb Pointer
FailureStatus HexInt32

Event ID 513 — The file system detected a corruption on a file.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on a file. The file has been removed from the file system namespace. The name of the file is "ObjectName".

Message #

The file system detected a corruption on a file. The file has been removed from the file system namespace. The name of the file is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 514 — The file system detected a corruption on a file.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on a file. The file system may have failed to remove it from the file system namespace. The name of the file is "ObjectName".

Message #

The file system detected a corruption on a file. The file system may have failed to remove it from the file system namespace. The name of the file is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 515 — The file system detected a corruption on a folder.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on a folder. Contents of the folder have been removed from the file system namespace. The name of the folder is "ObjectName".

Message #

The file system detected a corruption on a folder. Contents of the folder have been removed from the file system namespace. The name of the folder is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 516 — The file system detected a corruption on a folder.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on a folder. The file system may have failed to remove contents of the folder from the file system namespace. The name of the folder is "ObjectName".

Message #

The file system detected a corruption on a folder. The file system may have failed to remove contents of the folder from the file system namespace. The name of the folder is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 517 — The file system determined that there were multiple volumes on the given disk so has disabled read cache for the volume "VolumeId".

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system determined that there were multiple volumes on the given disk so has disabled read cache for the volume "VolumeId". Status is "FailureReason".

Message #

The file system determined that there were multiple volumes on the given disk so has disabled read cache for the volume "%2".  Status is "%3".

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 518 — The file system could not determine if there were multiple volumes on the given disk (status is "FailureReason") so has disabled read cache for the volume "VolumeId".

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system could not determine if there were multiple volumes on the given disk (status is "FailureReason") so has disabled read cache for the volume "VolumeId".

Message #

The file system could not determine if there were multiple volumes on the given disk (status is "%3") so has disabled read cache for the volume "%2".

Fields #

NameDescription
VolumeIdLength UInt16
VolumeId UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
SpaceId GUID

Event ID 519 — The file system detected a corruption on file system metadata.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on file system metadata. The name of the stream is "ObjectName".

Message #

The file system detected a corruption on file system metadata. The name of the stream is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 520 — The file system detected a corruption on file system metadata.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected a corruption on file system metadata. The name of the stream is "ObjectName".

Message #

The file system detected a corruption on file system metadata. The name of the stream is "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 521 — Volume "ObjectName" detected a corruption on file system metadata.

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

Volume "ObjectName" detected a corruption on file system metadata. It will lose self-healing features.

Message #

Volume "%2" detected a corruption on file system metadata. It will lose self-healing features.

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID

Event ID 522 — The file system detected and fixed volume size inconsistency in boot sector of volume "ObjectName".

Provider
Microsoft-Windows-ReFS
Channel
System
Opcode
Info

Description

The file system detected and fixed volume size inconsistency in boot sector of volume "ObjectName".

Message #

The file system detected and fixed volume size inconsistency in boot sector of volume "%2".

Fields #

NameDescription
ObjectNameLength UInt16
ObjectName UnicodeString
FailureReason HexInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
VolumeIdLength UInt16
VolumeId UnicodeString
SpaceId GUID