Volsnap
122 events across 2 channels
Event ID 1 — The shadow copy of volume {VolumeNameLength} could not create shadow copy storage on volume {VolumeName}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 2 — The shadow copy of volume {VolumeNameLength} could not be created because volume {VolumeName}; which is specified as the location for shadow copy s...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 3 — The shadow copy of volume {VolumeNameLength} could not lock down the location of the shadow copy storage on volume {VolumeName}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 4 — The shadow copy of volume {VolumeNameLength} could not be created due to insufficient resources for worker threads.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 5 — The shadow copy of volume {VolumeNameLength} could not be created due to insufficient non-paged memory pool for a bitmap structure.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 6 — The shadow copy of volume {VolumeNameLength} could not create a new paged heap.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 7 — The shadow copy of volume {VolumeNameLength} failed to query the shadow copy storage mappings on volume {VolumeName}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 8 — The flush and hold writes operation on volume {VolumeNameLength} timed out while waiting for a release writes command.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 9 — The flush and hold writes operation on volume {VolumeNameLength} timed out while waiting for file system cleanup.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 10 — The shadow copy of volume {VolumeNameLength} took too long to install.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 13 — The shadow copy of volume {VolumeNameLength} could not grow its shadow copy storage on volume {VolumeName}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 14 — The shadow copies of volume {VolumeNameLength} were aborted because of an IO failure on volume {VolumeName}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 15 — The shadow copies of volume {VolumeNameLength} were aborted because of insufficient paged heap.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 16 — The shadow copies of volume {VolumeNameLength} were aborted because volume {VolumeName}; which contains shadow copy storage for this shadow copy; w...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 17 — An attempt to flush and hold writes on volume {VolumeNameLength} was attempted while another flush and hold was already in progress.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 20 — The shadow copies of volume {VolumeNameLength} were aborted because of a failed free space computation.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 21 — The flush and hold operation for volume {VolumeNameLength} was aborted because of low available system memory.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 22 — The shadow copy storage volume specified for shadow copies on volume {VolumeNameLength} could not be added.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 23 — There was insufficient disk space on volume {VolumeName} to create the shadow copy of volume {VolumeNameLength}.
Message
Fields
| Name | Description |
|---|---|
VolumeName | — |
VolumeNameLength | — |
Event ID 24 — There was insufficient disk space on volume {VolumeName} to grow the shadow copy storage for shadow copies of {VolumeNameLength}.
Message
Fields
| Name | Description |
|---|---|
VolumeName | — |
VolumeNameLength | — |
Event ID 25 — The shadow copies of volume {VolumeNameLength} were deleted because the shadow copy storage could not grow in time.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 27 — The shadow copies of volume {VolumeNameLength} were aborted during detection because a critical control file could not be opened.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 28 — The shadow copy of volume {VolumeNameLength} could not be created due to a failure in creating the necessary on disk structures.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 29 — The shadow copies of volume {VolumeNameLength} were aborted during detection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 30 — An unfinished create of a shadow copy of volume {VolumeNameLength} was deleted.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 31 — A control item for shadow copies of volume {VolumeNameLength} was lost during detection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 32 — The shadow copies of volume {VolumeNameLength} were aborted because the shadow copy storage volume was not present.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 33 — The oldest shadow copy of volume {VolumeNameLength} was deleted to keep disk space usage for shadow copies of volume {VolumeNameLength} below the u...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 35 — The shadow copies of volume {VolumeNameLength} were aborted because the shadow copy storage failed to grow.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 36 —
Fields
| Name | Description |
|---|---|
Data | — |
Binary | — |
Example Event
system:
provider: volsnap
guid: ''
event_source_name: ''
event_id: 36
version: 0
level: 2
task: 0
opcode: 0
keywords: 36028797018963968
time_created: '2012-03-21T04:21:17.758144Z'
event_record_id: 12919
correlation: {}
execution:
process_id: 0
thread_id: 0
channel: System
computer: WKS-WIN764BITB.shieldbase.local
security:
user_id: ''
event_data:
Data:
- \Device\HarddiskVolumeShadowCopy2
- 'C:'
Binary: 000000000200300000000000240006C0020000000000000000000000000000000000000000000000
Event ID 38 — There was a user imposed limit that prevented disk space on volume {VolumeName} from being used to grow the shadow copy storage for shadow copies o...
Message
Fields
| Name | Description |
|---|---|
VolumeName | — |
VolumeNameLength | — |
Event ID 39 — When preparing a new volume shadow copy for volume {VolumeNameLength}; the shadow copy storage on volume {VolumeName} could not be located in non-c...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 40 — The shadow copies of volume {VolumeNameLength} were aborted because volume {VolumeName} has been dismounted.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 41 — When preparing a new volume shadow copy for volume {VolumeNameLength}; the shadow copy storage on volume {VolumeName} did not have sufficiently lar...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 48 — When preparing a new volume shadow copy for volume {VolumeNameLength}; the shadow copy storage on volume {VolumeName} did not have sufficiently lar...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 58 — The oldest shadow copy of volume {VolumeNameLength} was deleted to keep the total number of shadow copies of volume {VolumeNameLength} below a limit.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 59 — The shadow copies of volume {VolumeNameLength} were aborted because the shadow copy storage volume was not present in time during a previous session.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 60 — The shadow copies of volume {VolumeNameLength} were aborted because volume {VolumeName}; which contains shadow copy storage for this shadow copy; h...
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
VolumeName | — |
Event ID 61 — The revert operation on volume {VolumeNameLength} encountered a bad sector error.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 62 — The revert operation on volume {VolumeNameLength} stopped because of the loss of a volume.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 63 — An error occurred while trying to delete a snapshot of {VolumeNameLength}.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 64 — Volume {VolumeNameLength} is being reverted to the state of a previous shadow copy.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 65 — The reverting of volume {VolumeNameLength} is being restarted.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 66 — The reverting of volume {VolumeNameLength} to the state of a previous shadow copy is complete.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 67 — The shadow copy of volume {VolumeNameLength} being created failed to install.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 80 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 81 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 82 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 83 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 84 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 85 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 86 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 87 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 88 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 89 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 90 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 91 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 92 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 93 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 94 — Volume {VolumeNameLength} is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
VolumeNameLength | — |
Event ID 1074135073 — The oldest shadow copy of volume %2 was deleted to keep disk space usage for shadow copies of volume %2 below the user defined limit.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 1074135098 — The oldest shadow copy of volume %2 was deleted to keep the total number of shadow copies of volume %2 below a limit.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 1074135104 — Volume %2 is being reverted to the state of a previous shadow copy.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 1074135105 — The reverting of volume %2 is being restarted.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 1074135106 — The reverting of volume %2 to the state of a previous shadow copy is complete.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 1074135135 — The oldest shadow copy of volume %2 was deleted to allow shadow copies created afterward and marked for delete to be deleted.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 2147876888 — There was insufficient disk space on volume %3 to grow the shadow copy storage for shadow copies of %2.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 2147876894 — An unfinished create of a shadow copy of volume %2 was deleted.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 2147876902 — There was a user imposed limit that prevented disk space on volume %3 from being used to grow the shadow copy storage for shadow copies of %2.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 2147876925 — The revert operation on volume %2 encountered a bad sector error.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 2147876926 — The revert operation on volume %2 stopped because of the loss of a volume.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618689 — The shadow copy of volume %2 could not create shadow copy storage on volume %3.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618690 — The shadow copy of volume %2 could not be created because volume %3, which is specified as the location for shadow copy storage, is not an NTFS vol...
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618691 — The shadow copy of volume %2 could not lock down the location of the shadow copy storage on volume %3.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618692 — The shadow copy of volume %2 could not be created due to insufficient resources for worker threads.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618693 — The shadow copy of volume %2 could not be created due to insufficient non-paged memory pool for a bitmap structure.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618694 — The shadow copy of volume %2 could not create a new paged heap.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618695 — The shadow copy of volume %2 failed to query the shadow copy storage mappings on volume %3.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618696 — The flush and hold writes operation on volume %2 timed out while waiting for a release writes command.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618697 — The flush and hold writes operation on volume %2 timed out while waiting for file system cleanup.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618698 — The shadow copy of volume %2 took too long to install.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618701 — The shadow copy of volume %2 could not grow its shadow copy storage on volume %3.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618702 — The shadow copies of volume %2 were aborted because of an IO failure on volume %3.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618703 — The shadow copies of volume %2 were aborted because of insufficient paged heap.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618704 — The shadow copies of volume %2 were aborted because volume %3, which contains shadow copy storage for this shadow copy, was force dismounted.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618705 — An attempt to flush and hold writes on volume %2 was attempted while another flush and hold was already in progress.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618708 — The shadow copies of volume %2 were aborted because of a failed free space computation.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618709 — The flush and hold operation for volume %2 was aborted because of low available system memory.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618710 — The shadow copy storage volume specified for shadow copies on volume %2 could not be added.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618711 — There was insufficient disk space on volume %3 to create the shadow copy of volume %2.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618713 — The shadow copies of volume %2 were deleted because the shadow copy storage could not grow in time.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618715 — The shadow copies of volume %2 were aborted during detection because a critical control file could not be opened.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618716 — The shadow copy of volume %2 could not be created due to a failure in creating the necessary on disk structures.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618717 — The shadow copies of volume %2 were aborted during detection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618719 — A control item for shadow copies of volume %2 was lost during detection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618720 — The shadow copies of volume %2 were aborted because the shadow copy storage volume was not present.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618723 — The shadow copies of volume %2 were aborted because the shadow copy storage failed to grow.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618724 — The shadow copies of volume %2 were aborted because the shadow copy storage could not grow due to a user imposed limit.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618727 — When preparing a new volume shadow copy for volume %2, the shadow copy storage on volume %3 could not be located in non-critical space.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618728 — The shadow copies of volume %2 were aborted because volume %3 has been dismounted.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618729 — When preparing a new volume shadow copy for volume %2, the shadow copy storage on volume %3 did not have sufficiently large contiguous blocks.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618736 — When preparing a new volume shadow copy for volume %2, the shadow copy storage on volume %3 did not have sufficiently large contiguous blocks.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618747 — The shadow copies of volume %2 were aborted because the shadow copy storage volume was not present in time during a previous session.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618748 — The shadow copies of volume %2 were aborted because volume %3, which contains shadow copy storage for this shadow copy, has been taken offline.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
DiffAreaVolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618751 — An error occurred while trying to delete a snapshot of %2.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618755 — The shadow copy of volume %2 being created failed to install.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618768 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618769 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618770 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618771 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618772 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618773 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618774 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618775 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618776 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618777 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618778 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618779 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618780 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618781 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618782 — Volume %2 is offline for shadow copy protection.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |
Event ID 3221618784 — The shadow copies of volume %2 were aborted because of an error when disabling BypassIO.
Message
Fields
| Name | Description |
|---|---|
DeviceName | — |
VolumeName | — |
NTSTATUS | — |
SourceTag | — |
SourceFileID | — |
SourceLine | — |
binary | — |