Microsoft-Windows-StorageManagement-WSP-Spaces
36 events across 1 channel
Event ID 2000 — The Windows Storage Provider could not start the remote storage subsystem.
Event ID 2001 — The Windows Storage Provider has lost its connection to the cluster.
Event ID 2002 — The Windows Storage Provider has established a connection to the cluster.
Description
The Windows Storage Provider has established a connection to the cluster.
Message #
Event ID 2003 — An error occurred during method execution.
Event ID 2004 — An error was posted by the Windows Storage Provider during the course of an operation.
Event ID 2005 — An error occurred during storage job execution.
Event ID 2006 — An error occurred during a get instance operation.
Event ID 2007 — An error occurred during object enumeration.
Event ID 2008 — An error occurred during method execution.
Event ID 2009 — An error occurred while trying to perform a diagnostic operation.
Event ID 2010 — The Windows Storage Spaces and Disk provider was loaded.
#Description
The Windows Storage Spaces and Disk provider was loaded.
Message #
Fields #
| Name | Description |
|---|---|
LoadTime_msecs UInt32 | — |
MI_Result UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorageManagement-WSP-Spaces",
"guid": "88C09888-118D-48FC-8863-E1C6D39CA4DF",
"event_source_name": "",
"event_id": 2010,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2023-10-25T22:49:38.030255+00:00",
"event_record_id": 4,
"correlation": {
"ActivityID": "49DBD9FB-0795-0000-18F0-DB499507DA01"
},
"execution": {
"process_id": 6420,
"thread_id": 5412
},
"channel": "Microsoft-Windows-StorageManagement/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"LoadTime_msecs": 47,
"MI_Result": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2011 — Cluster state initialization succeeded.
Event ID 2012 — Cluster state initialization failed.
Event ID 2013 — Cluster node arrived.
Event ID 2014 — Cluster node Node was deleted.
Event ID 2015 — Cluster node Node came online.
Event ID 2016 — Cluster node Node went offline.
Event ID 2017 — It took longer than usual for this target node to respond to the following control code.
Event ID 2018 — It took longer than usual for this initiator node to complete the following control code.
Event ID 2019 — One or more nodes did not respond to the cluster broadcast.
Event ID 2020 — An unmapped error was encountered.
Event ID 2021 — It is taking longer than usual for this target node to respond to the following control code.
Event ID 2022 — It is taking longer than usual for this initiator node to complete the following control code.
Event ID 2023 — Successfully initialized the Storage Management Provider.
#Description
Successfully initialized the Storage Management Provider.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Runtime_msecs UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorageManagement-WSP-Spaces",
"guid": "88C09888-118D-48FC-8863-E1C6D39CA4DF",
"event_source_name": "",
"event_id": 2023,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2023-10-25T22:49:38.030091+00:00",
"event_record_id": 3,
"correlation": {
"ActivityID": "49DBD9FB-0795-0000-18F0-DB499507DA01"
},
"execution": {
"process_id": 6420,
"thread_id": 5412
},
"channel": "Microsoft-Windows-StorageManagement/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"Function": "CSpProvider::Initialize",
"Runtime_msecs": 49
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2024 — Failed to initialize the Storage Management Provider.
Event ID 2025 — Successfully cleaned up the Storage Management Provider.
Description
Successfully cleaned up the Storage Management Provider.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Runtime_msecs UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorageManagement-WSP-Spaces",
"guid": "88C09888-118D-48FC-8863-E1C6D39CA4DF",
"event_source_name": "",
"event_id": 2025,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-09T18:55:49.426575+00:00",
"event_record_id": 24,
"correlation": {
"ActivityID": "9FF1A52F-4A79-4A0B-A8C0-D2AEAF7E912A"
},
"execution": {
"process_id": 2188,
"thread_id": 9228
},
"channel": "Microsoft-Windows-StorageManagement/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"Function": "CSpProvider::Cleanup",
"Runtime_msecs": 0
},
"message": ""
}
Event ID 2026 — Failed to clean up the Storage Management Provider.
Event ID 2027 — Successfully initialized Extended Storage Spaces API.
#Description
Successfully initialized Extended Storage Spaces API.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Runtime_msecs UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorageManagement-WSP-Spaces",
"guid": "88C09888-118D-48FC-8863-E1C6D39CA4DF",
"event_source_name": "",
"event_id": 2027,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2023-10-25T22:49:38.028676+00:00",
"event_record_id": 2,
"correlation": {
"ActivityID": "49DBD9FB-0795-0000-18F0-DB499507DA01"
},
"execution": {
"process_id": 6420,
"thread_id": 5412
},
"channel": "Microsoft-Windows-StorageManagement/Operational",
"computer": "WinDevEval",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"Function": "SuInitializeEx",
"Runtime_msecs": 5
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2028 — Failed to initialize Extended Storage Spaces API.
Event ID 2029 — Successfully cleaned up Extended Storage Spaces API.
Description
Successfully cleaned up Extended Storage Spaces API.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Runtime_msecs UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorageManagement-WSP-Spaces",
"guid": "88C09888-118D-48FC-8863-E1C6D39CA4DF",
"event_source_name": "",
"event_id": 2029,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-09T18:55:49.425955+00:00",
"event_record_id": 23,
"correlation": {
"ActivityID": "9FF1A52F-4A79-4A0B-A8C0-D2AEAF7E912A"
},
"execution": {
"process_id": 2188,
"thread_id": 9228
},
"channel": "Microsoft-Windows-StorageManagement/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-20"
}
},
"event_data": {
"Function": "SuCleanupEx",
"Runtime_msecs": 0
},
"message": ""
}
Event ID 2030 — Failed to clean up Extended Storage Spaces API.
Event ID 2031 — Successfully Converted PhysicalDisk to Space.
Description
Successfully Converted PhysicalDisk to Space.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Runtime_msecs UInt64 | — |
DriveId GUID | — |
PoolName UnicodeString | — |
PoolVersion UInt16 | — |
PoolMetadataLength UInt32 | — |
PoolMinimumAllocationSize UInt64 | — |
SpaceName UnicodeString | — |
SpaceProvisioningType UInt16 | — |
SpaceAllocationSize UInt64 | — |
SpaceResiliencyType UInt16 | — |
MinimumFreeSizeRequired UInt64 | — |
Event ID 2032 — Failed to Convert PhysicalDisk to Space.
Description
Failed to Convert PhysicalDisk to Space.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | — |
Callee AnsiString | — |
Error UInt32 | — |
DriveId GUID | — |
PoolName UnicodeString | — |
PoolVersion UInt16 | — |
PoolMetadataLength UInt32 | — |
PoolMinimumAllocationSize UInt64 | — |
SpaceName UnicodeString | — |
SpaceProvisioningType UInt16 | — |
SpaceAllocationSize UInt64 | — |
SpaceResiliencyType UInt16 | — |
MinimumFreeSizeRequired UInt64 | — |