Ntfs

5 events across 1 channel

Event ID	Title	Channel
55	A corruption was discovered in the file system structure on volume DriveName.	System
130	The file system structure on volume VolumeId has now been repaired.	System
131	The file system structure on volume VolumeId cannot be corrected.	System
132	Too many repair events have occurred in a short period of time.	System
133	Skipped posting of TotalCount repair events.	System

Event ID 55 — A corruption was discovered in the file system structure on volume DriveName.

Provider: Ntfs
Channel: System

Description

A corruption was discovered in the file system structure on volume DriveName.

Message #

A corruption was discovered in the file system structure on volume %1.

%8

Fields #

Name	Description
`DriveName` UnicodeString	—
`DeviceName` UnicodeString	—
`CorruptionState` HexInt32	—
`HeaderFlags` HexInt32	—
`Severity` UnicodeString	—
`Origin` UnicodeString	—
`Verb` UnicodeString	—
`Description` UnicodeString	—
`Signature` HexInt32	—
`Outcome` UnicodeString	—
`SampleLength` UInt16	—
`SampleData` Binary	—
`SourceFile` HexInt32	—
`SourceLine` UInt16	—
`SourceTag` UInt32	—
`AdditionalInfo` HexInt32	—
`CallStack` AnsiString	—

Event ID 130 — The file system structure on volume VolumeId has now been repaired.

Provider: Ntfs
Channel: System

Description

The file system structure on volume VolumeId has now been repaired.

Message #

The file system structure on volume %2 has now been repaired.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`RepairDetail` UnicodeString	—
`RepairDataLength` UInt16	—
`RepairData` Binary	—

Event ID 131 — The file system structure on volume VolumeId cannot be corrected.

Provider: Ntfs
Channel: System

Description

The file system structure on volume VolumeId cannot be corrected.

Message #

The file system structure on volume %2 cannot be corrected.
Please run the chkdsk utility on the volume %2.

Fields #

Name	Description
`VolumeIdLength` UInt16	—
`VolumeId` UnicodeString	—
`RepairDetail` UnicodeString	—
`RepairDataLength` UInt16	—
`RepairData` Binary	—

Event ID 132 — Too many repair events have occurred in a short period of time.

Provider: Ntfs
Channel: System

Description

Too many repair events have occurred in a short period of time.

Message #

Too many repair events have occurred in a short period of time.
Temporarily suspending posting of further repair events.

Event ID 133 — Skipped posting of TotalCount repair events.

Provider: Ntfs
Channel: System

Description

Skipped posting of TotalCount repair events. Repair event posting will now be resumed.

Message #

Skipped posting of %1 repair events.  Repair event posting will now be resumed.
 Here are the skipped posting repair events count by repair verbs:
 BadFRS: %2
 OrphanChildFRS: %3
 BadClusters: %4
 BadFreeClusters: %5
 CrossLink: %6
 SDEntry: %7
 InvalidSecurityId: %8
 IndexAttribute: %9
 IndexSubtree: %10
 IndexOffset: %11
 IndexEntry: %12
 IndexOrder: %13
 Connect: %14
 BreakCycle: %15
 FRSAllocate: %16
 Others: %17

Fields #

Name	Description
`TotalCount` UInt32	—
`BadFrsCount` UInt32	—
`OrphanChildFRSCount` UInt32	—
`BadClustersCount` UInt32	—
`BadFreeClustersCount` UInt32	—
`CrossLinkCount` UInt32	—
`SDEntryCount` UInt32	—
`InvalidSidCount` UInt32	—
`IndexAttributeCount` UInt32	—
`IndexSubtreeCount` UInt32	—
`IndexOffsetCount` UInt32	—
`IndexEntryCount` UInt32	—
`IndexOrderCount` UInt32	—
`ConnectCount` UInt32	—
`BreakCycleCount` UInt32	—
`FRSAllocateCount` UInt32	—
`OthersCount` UInt32	—