Microsoft-Windows-FailoverClustering-Client
56 events across 3 channels
| Event | Title | Channel | Sample |
|---|---|---|---|
| 1 | Parameter1. | Diagnostic | N |
| 2 | Parameter1. | Diagnostic | N |
| 3 | Parameter1. | Diagnostic | N |
| 4 | Parameter1. | Diagnostic | N |
| 5 | Parameter1. | Diagnostic | N |
| 6 | Parameter1. | Diagnostic | N |
| 7 | Parameter1. | Diagnostic | N |
| 8 | Parameter1. | Diagnostic | N |
| 9 | Parameter1. | Diagnostic | N |
| 16 | Parameter1. | Diagnostic | N |
| 17 | Parameter1. | Diagnostic | N |
| 18 | Parameter1. | Diagnostic | N |
| 19 | Parameter1. | Diagnostic | N |
| 20 | Parameter1. | Diagnostic | N |
| 21 | Parameter1. | Diagnostic | N |
| 22 | Parameter1. | Diagnostic | N |
| 23 | Parameter1. | Diagnostic | N |
| 24 | Parameter1. | Diagnostic | N |
| 25 | Parameter1. | Diagnostic | N |
| 32 | Parameter1. | Diagnostic | N |
| 33 | Parameter1. | Diagnostic | N |
| 34 | Parameter1. | Diagnostic | N |
| 35 | Parameter1. | Diagnostic | N |
| 36 | Parameter1. | Diagnostic | N |
| 37 | Parameter1. | Diagnostic | N |
| 38 | Parameter1. | Diagnostic | N |
| 39 | Parameter1. | Diagnostic | N |
| 40 | Parameter1. | Diagnostic | N |
| 41 | Parameter1. | Diagnostic | N |
| 48 | Parameter1. | Diagnostic | N |
| 49 | Parameter1. | Diagnostic | N |
| 50 | Parameter1. | Diagnostic | N |
| 51 | Parameter1. | Diagnostic | N |
| 52 | Parameter1. | Diagnostic | N |
| 53 | Parameter1. | Diagnostic | N |
| 54 | Parameter1. | Diagnostic | N |
| 55 | Parameter1. | Diagnostic | N |
| 56 | Parameter1. | Diagnostic | N |
| 57 | Parameter1. | Diagnostic | N |
| 64 | Parameter1. | Diagnostic | N |
| 65 | Parameter1. | Diagnostic | N |
| 66 | Parameter1. | Diagnostic | N |
| 67 | Parameter1. | Diagnostic | N |
| 68 | Parameter1. | Diagnostic | N |
| 69 | Parameter1. | Diagnostic | N |
| 70 | Parameter1. | Diagnostic | N |
| 71 | Parameter1. | Diagnostic | N |
| 72 | Parameter1. | Diagnostic | N |
| 73 | Parameter1. | Diagnostic | N |
| 80 | Parameter1. | Diagnostic | N |
| 81 | Parameter1. | System | Y |
| 82 | Parameter1. | Operational | N |
| 83 | Parameter1. | Operational | N |
| 84 | Parameter1. | Operational | N |
| 85 | Parameter1. | Operational | N |
| 86 | Parameter1. | Operational | N |
Event ID 1: Parameter1.
#Event ID 2: Parameter1.
#Event ID 3: Parameter1.
#Event ID 4: Parameter1.
#Event ID 5: Parameter1.
#Event ID 6: Parameter1.
#Event ID 7: Parameter1.
#Event ID 8: Parameter1.
#Event ID 9: Parameter1.
#Event ID 16: Parameter1.
#Event ID 17: Parameter1.
#Event ID 18: Parameter1.
#Event ID 19: Parameter1.
#Event ID 20: Parameter1.
#Event ID 21: Parameter1.
#Event ID 22: Parameter1.
#Event ID 23: Parameter1.
#Event ID 24: Parameter1.
#Event ID 25: Parameter1.
#Event ID 32: Parameter1.
#Event ID 33: Parameter1.
#Event ID 34: Parameter1.
#Event ID 35: Parameter1.
#Event ID 36: Parameter1.
#Event ID 37: Parameter1.
#Event ID 38: Parameter1.
#Event ID 39: Parameter1.
#Event ID 40: Parameter1.
#Event ID 41: Parameter1.
#Event ID 48: Parameter1.
#Event ID 49: Parameter1.
#Event ID 50: Parameter1.
#Event ID 51: Parameter1.
#Event ID 52: Parameter1.
#Event ID 53: Parameter1.
#Event ID 54: Parameter1.
#Event ID 55: Parameter1.
#Event ID 56: Parameter1.
#Event ID 57: Parameter1.
#Event ID 64: Parameter1.
#Event ID 65: Parameter1.
#Event ID 66: Parameter1.
#Event ID 67: Parameter1.
#Event ID 68: Parameter1.
#Event ID 69: Parameter1.
#Event ID 70: Parameter1.
#Event ID 71: Parameter1.
#Event ID 72: Parameter1.
#Event ID 73: Parameter1.
#Event ID 80: Parameter1.
#Event ID 81: Parameter1.
#Description
Parameter1
Message #
Fields #
| Name | Description |
|---|---|
Parameter1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-Client",
"guid": "{A82FDA5D-745F-409C-B0FE-18AE0678A0E0}",
"event_source_name": "",
"event_id": 81,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": -9223372036854774784,
"time_created": "2026-06-13T13:35:28.9237459+00:00",
"event_record_id": 8619,
"correlation": {},
"execution": {
"process_id": 1760,
"thread_id": 6536
},
"channel": "System",
"computer": "telemetry-DC-c.cell-c.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Parameter1": "LogExtendedErrorInformation (975): Extended RPC error information:\nProcessID is 1760\nSystem time is: 32701/476/45871 529:0:40480:45144\nGenerating component is 2\nStatus is 1753\nDetection location is 501\nFlags is 0\nNumberOfParameters is 4\nUnicode string: ncacn_ip_tcp\nUnicode string: TELEMETRY-DC-C\nLong val: -1182943054\nLong val: 382312662\n"
},
"message": "LogExtendedErrorInformation (975): Extended RPC error information:\r\nProcessID is 1760\r\nSystem time is: 32701/476/45871 529:0:40480:45144\r\nGenerating component is 2\r\nStatus is 1753\r\nDetection location is 501\r\nFlags is 0\r\nNumberOfParameters is 4\r\nUnicode string: ncacn_ip_tcp\r\nUnicode string: TELEMETRY-DC-C\r\nLong val: -1182943054\r\nLong val: 382312662\r\n"
}
Event ID 82: Parameter1.
#Event ID 83: Parameter1.
#Event ID 84: Parameter1.
#Event ID 85: Parameter1.
#Event ID 86: Parameter1.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID a82fda5d-745f-409c-b0fe-18ae0678a0e0
Defined in clusapi.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02