Microsoft-Windows-FailoverClustering-Client

EventTitleChannelSampleRule
1Parameter1.DiagnosticNN
2Parameter1.DiagnosticYN
3Parameter1.DiagnosticNN
4Parameter1.DiagnosticNN
5Parameter1.DiagnosticNN
6Parameter1.DiagnosticNN
7Parameter1.DiagnosticNN
8Parameter1.DiagnosticNN
9Parameter1.DiagnosticNN
16Parameter1.DiagnosticNN
17Parameter1.DiagnosticNN
18Parameter1.DiagnosticNN
19Parameter1.DiagnosticNN
20Parameter1.DiagnosticNN
21Parameter1.DiagnosticNN
22Parameter1.DiagnosticNN
23Parameter1.DiagnosticNN
24Parameter1.DiagnosticNN
25Parameter1.DiagnosticNN
32Parameter1.DiagnosticNN
33Parameter1.DiagnosticNN
34Parameter1.DiagnosticNN
35Parameter1.DiagnosticNN
36Parameter1.DiagnosticNN
37Parameter1.DiagnosticNN
38Parameter1.DiagnosticNN
39Parameter1.DiagnosticNN
40Parameter1.DiagnosticNN
41Parameter1.DiagnosticNN
48Parameter1.DiagnosticNN
49Parameter1.DiagnosticNN
50Parameter1.DiagnosticNN
51Parameter1.DiagnosticNN
52Parameter1.DiagnosticNN
53Parameter1.DiagnosticNN
54Parameter1.DiagnosticNN
55Parameter1.DiagnosticNN
56Parameter1.DiagnosticNN
57Parameter1.DiagnosticNN
64Parameter1.DiagnosticNN
65Parameter1.DiagnosticNN
66Parameter1.DiagnosticNN
67Parameter1.DiagnosticNN
68Parameter1.DiagnosticNN
69Parameter1.DiagnosticNN
70Parameter1.DiagnosticNN
71Parameter1.DiagnosticNN
72Parameter1.DiagnosticNN
73Parameter1.DiagnosticNN
80Parameter1.DiagnosticNN
81Parameter1.SystemYN
82Parameter1.OperationalNN
83Parameter1.OperationalNN
84Parameter1.OperationalNN
85Parameter1.OperationalNN
86Parameter1.OperationalNN

Event ID 1: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 2: Parameter1.

#
Channel
Diagnostic
Level
Error

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-FailoverClustering-Client/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 2,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 2344,
      "thread_id": 6904
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-FailoverClustering-Client",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 02:08:37.636Z",
    "version": 0
  },
  "event_data": {
    "Parameter1": "GetNodeServiceState (652): Error in opening handle for cluster service for node . Error 1060"
  },
  "message": ""
}

Event ID 3: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 4: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 5: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 6: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 7: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 8: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 9: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 16: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 17: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 18: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 19: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 20: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 21: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 22: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 23: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 24: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 25: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 32: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 33: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 34: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 35: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 36: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 37: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 38: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 39: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 40: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 41: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 48: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 49: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 50: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 51: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 52: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 53: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 54: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 55: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 56: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 57: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 64: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 65: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 66: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 67: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 68: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 69: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 70: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 71: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 72: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 73: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 80: Parameter1.

#
Channel
Diagnostic

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 81: Parameter1.

#
Channel
System
Level
Error

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-Client",
    "guid": "{A82FDA5D-745F-409C-B0FE-18AE0678A0E0}",
    "event_source_name": "",
    "event_id": 81,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": -9223372036854774784,
    "time_created": "2026-06-13T13:35:28.9237459+00:00",
    "event_record_id": 8619,
    "correlation": {},
    "execution": {
      "process_id": 1760,
      "thread_id": 6536
    },
    "channel": "System",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter1": "LogExtendedErrorInformation (975): Extended RPC error information:\nProcessID is 1760\nSystem time is: 32701/476/45871 529:0:40480:45144\nGenerating component is 2\nStatus is 1753\nDetection location is 501\nFlags is 0\nNumberOfParameters is 4\nUnicode string: ncacn_ip_tcp\nUnicode string: TELEMETRY-DC-C\nLong val: -1182943054\nLong val: 382312662\n"
  },
  "message": "LogExtendedErrorInformation (975): Extended RPC error information:\r\nProcessID is 1760\r\nSystem time is: 32701/476/45871 529:0:40480:45144\r\nGenerating component is 2\r\nStatus is 1753\r\nDetection location is 501\r\nFlags is 0\r\nNumberOfParameters is 4\r\nUnicode string: ncacn_ip_tcp\r\nUnicode string: TELEMETRY-DC-C\r\nLong val: -1182943054\r\nLong val: 382312662\r\n"
}

Event ID 82: Parameter1.

#
Channel
Operational

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 83: Parameter1.

#
Channel
Operational

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 84: Parameter1.

#
Channel
Operational

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 85: Parameter1.

#
Channel
Operational

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Event ID 86: Parameter1.

#
Channel
Operational

Message #

%1

Fields #

NameDescription
Parameter1 UnicodeString

Provenance

ETW provider GUID a82fda5d-745f-409c-b0fe-18ae0678a0e0

Defined in clusapi.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB