Message

The Windows Storage Provider could not start the remote storage subsystem.             
Storage Subsystem ID: %1             
Storage Subsystem URI: %2             
Username: %3             
Error Code: %4             
Error String: %5             

Ensure that the remote storage subsystem is online and connected to the network.             
Check if the user attempting to connect to the subsystem has the necessary permissions.

Fields

Message

The Windows Storage Provider has lost its connection to the cluster.             
Error Code: %1

Fields

Message

The Windows Storage Provider has established a connection to the cluster.

Message

An error occurred during method execution.             
Class: %1             
Method: %2             
ObjectId: %3             
Error Code: %4

Fields

Message

An error was posted by the Windows Storage Provider during the course of an operation.             
Message: %1

Fields

Message

An error occurred during storage job execution.             
Job Name: %1             
Error Code: %2

Fields

Message

An error occurred during a get instance operation.             
Class: %1             
ObjectId: %2             
Error Code: %3

Fields

Message

An error occurred during object enumeration.             
Class: %1             
Error Code: %2

Fields

Message

An error occurred during method execution.             
Class: %1             
Method: %2             
ObjectId: %3             
MI_Result: %4

Fields

Message

An error occurred while trying to perform a diagnostic operation.             
Computer name: %1             
Error Code: %2             
Secondary Error: %3

Fields

Message

The Windows Storage Spaces and Disk provider was loaded.             
Load time (milliseconds): %1             
Miresult: %2

Fields

Example Event

system:
  provider: Microsoft-Windows-StorageManagement-WSP-Spaces
  guid: 88C09888-118D-48FC-8863-E1C6D39CA4DF
  event_source_name: ''
  event_id: 2010
  version: 1
  level: 4
  task: 0
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-10-25T22:49:38.030255+00:00'
  event_record_id: 4
  correlation:
    ActivityID: 49DBD9FB-0795-0000-18F0-DB499507DA01
  execution:
    process_id: 6420
    thread_id: 5412
  channel: Microsoft-Windows-StorageManagement/Operational
  computer: WinDevEval
  security:
    user_id: S-1-5-20
event_data:
  LoadTime_msecs: 47
  MI_Result: 0
message: ''

References

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Message

Cluster state initialization succeeded.             
Cluster name: %1

Fields

Message

Cluster state initialization failed.             
Cluster Name: %1             
Initialization Phase: %2             
HRESULT: %3

Fields

Message

Cluster node arrived.             
Node: %1             
Node State: %2

Fields

Message

Cluster node %1 was deleted.

Fields

Message

Cluster node %1 came online.

Fields

Message

Cluster node %1 went offline.

Fields

Message

It took longer than usual for this target node to respond to the following control code.             
Control Code: %1 (%2)             
Response time (milliseconds): %3

Fields

Message

It took longer than usual for this initiator node to complete the following control code.             
Control Code: %1 (%2)             
Complete time (milliseconds): %3

Fields

Message

One or more nodes did not respond to the cluster broadcast.             
Control Code: %1 (%2)             
Nodes: %3             
Unresponsive Nodes: %4

Fields

Message

An unmapped error was encountered.             
Function: %1             
HResult: %2             
MI_Result: %3

Fields

Message

It is taking longer than usual for this target node to respond to the following control code.             
Control Code: %1 (%2)

Fields

Message

It is taking longer than usual for this initiator node to complete the following control code.             
Control Code: %1 (%2)

Fields

Message

Successfully initialized the Storage Management Provider.             
Function: %1             
Duration (milliseconds): %2

Fields

Example Event

system:
  provider: Microsoft-Windows-StorageManagement-WSP-Spaces
  guid: 88C09888-118D-48FC-8863-E1C6D39CA4DF
  event_source_name: ''
  event_id: 2023
  version: 1
  level: 4
  task: 0
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-10-25T22:49:38.030091+00:00'
  event_record_id: 3
  correlation:
    ActivityID: 49DBD9FB-0795-0000-18F0-DB499507DA01
  execution:
    process_id: 6420
    thread_id: 5412
  channel: Microsoft-Windows-StorageManagement/Operational
  computer: WinDevEval
  security:
    user_id: S-1-5-20
event_data:
  Function: CSpProvider::Initialize
  Runtime_msecs: 49
message: ''

References

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Message

Failed to initialize the Storage Management Provider.             
Function: %1             
Callee: %2             
MI_Result: %3

Fields

Message

Successfully cleaned up the Storage Management Provider.             
Function: %1             
Duration (milliseconds): %2

Fields

Message

Failed to clean up the Storage Management Provider.             
Function: %1             
Callee: %2             
MI_Result: %3

Fields

Message

Successfully initialized Extended Storage Spaces API.             
Function: %1             
Duration (milliseconds): %2

Fields

Example Event

system:
  provider: Microsoft-Windows-StorageManagement-WSP-Spaces
  guid: 88C09888-118D-48FC-8863-E1C6D39CA4DF
  event_source_name: ''
  event_id: 2027
  version: 1
  level: 4
  task: 0
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-10-25T22:49:38.028676+00:00'
  event_record_id: 2
  correlation:
    ActivityID: 49DBD9FB-0795-0000-18F0-DB499507DA01
  execution:
    process_id: 6420
    thread_id: 5412
  channel: Microsoft-Windows-StorageManagement/Operational
  computer: WinDevEval
  security:
    user_id: S-1-5-20
event_data:
  Function: SuInitializeEx
  Runtime_msecs: 5
message: ''

References

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Message

Failed to initialize Extended Storage Spaces API.             
Function: %1             
Callee: %2             
Error: %3

Fields

Message

Successfully cleaned up Extended Storage Spaces API.             
Function: %1             
Duration (milliseconds): %2

Fields

Message

Failed to clean up Extended Storage Spaces API.             
Function: %1             
Callee: %2             
Error: %3

Fields

Message

Successfully Converted PhysicalDisk to Space.             
Function: %1             
Duration (milliseconds): %2             
DriveId: %3             
PoolName: %4             
PoolVersion: %5             
PoolMetadataLength: %6             
PoolMinimumAllocationSize: %7             
SpaceName: %8             
SpaceProvisioningType: %9             
SpaceAllocationSize: %10             
SpaceResiliencyType: %11             
MinimumFreeSizeRequired: %12

Fields

Message

Failed to Convert PhysicalDisk to Space.             
Function: %1             
Callee: %2             
Error: %3             
DriveId: %4             
PoolName: %5             
PoolVersion: %6             
PoolMetadataLength: %7             
PoolMinimumAllocationSize: %8             
SpaceName: %9             
SpaceProvisioningType: %10             
SpaceAllocationSize: %11             
SpaceResiliencyType: %12             
MinimumFreeSizeRequired: %13

Fields

Message

It is taking longer than usual to execute the following function.             
Function: %1

Fields

Message

It took longer than usual to complete the following function.             
Function: %1             
Response time (milliseconds): %2

Fields

Message

Failed to query ReFSDedupSvc.             
Function: %1             
Stage: %2             
ErrorMessage: %3             
VolumeName: %4             
HRESULT: %5

Fields