Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic

90 events across 3 channels

EventTitleChannelSample
1Event ID 1OperationalN
1Disk DeviceId has arrived.OperationalY
2Event ID 2OperationalN
2Disk DeviceId is claimed by clusbflt.OperationalN
3Event ID 3OperationalN
3Disk DeviceId is not claimed by clusbflt, Status Status.OperationalY
8Event ID 8OperationalN
8Disk DeviceId was removed.OperationalN
51Event ID 51OperationalN
51Enclosure arrivedOperationalN
52Event ID 52OperationalN
52Enclosure removedOperationalN
101Event ID 101OperationalN
101Path PathId (attributes=Attributes, type=PathType) was created for device …OperationalY
102Event ID 102OperationalN
102Path PathId (attributes=Attributes, type=PathType) was removed for device …OperationalN
103Event ID 103OperationalN
103Path PathId (attributes=Attributes, down path=DownPathId) was paused for device …OperationalN
104Event ID 104OperationalN
104Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device …OperationalN
105Event ID 105OperationalN
105Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout …OperationalN
151Event ID 151OperationalN
151Received request to update membership to Membership, flags = Flags.ConnectivityN
152Event ID 152OperationalN
152Completed request to update membership to Membership, flags = Flags, status …ConnectivityN
153Event ID 153OperationalN
153Completed request to set registration key to RegistrationKey, status Status.ConnectivityN
154Event ID 154OperationalN
154Client cluster with Id ClusterId and instance id InstanceId registered.ConnectivityN
155Event ID 155OperationalN
155Client cluster with Id ClusterId and instance id InstanceId unregistered on …ConnectivityN
156Event ID 156OperationalN
156Client cluster with Id ClusterId and instance id InstanceId unregistered because …ConnectivityN
157Event ID 157OperationalN
157Received client cluster membership update from node id NodeId.ConnectivityN
158Event ID 158OperationalN
158Applied client cluster membership update from node id NodeId.ConnectivityN
159Event ID 159OperationalN
159Target create for cluster node id NodeId for path PathId with cluster Id …ConnectivityY
160Event ID 160OperationalN
160Target create request rejected from cluster node id NodeId for path PathId with …ConnectivityN
201Event ID 201OperationalN
201Node NodeId connected to path PathId device DeviceId.ConnectivityN
202Event ID 202OperationalN
202Node NodeId disconnected from path PathId device DeviceId.ConnectivityN
251Event ID 251OperationalN
251Remove all partitions from device DeviceGuid (DeviceId), Status=Status.OperationalN
252Event ID 252OperationalN
252Trim device DeviceGuid (DeviceId), Status=Status.OperationalN
253Event ID 253OperationalN
253Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.OperationalN
254Event ID 254OperationalN
254Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.OperationalN
255Event ID 255OperationalN
255Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), …OperationalN
256Event ID 256OperationalN
256Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve …OperationalN
257Event ID 257OperationalN
257Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition …OperationalN
258Event ID 258OperationalN
258UnBind Hdd device DeviceGuid (DeviceId), Options Options, …OperationalN
259Event ID 259OperationalN
259Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id …OperationalN
260Event ID 260OperationalN
260Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id …OperationalN
261Event ID 261OperationalN
261Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid …OperationalN
301Event ID 301OperationalN
301Runtime error in Function@LineNumber, Status=Status.OperationalY
351Event ID 351OperationalN
351Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId …OperationalN
352Event ID 352OperationalN
352Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId …OperationalN
353Event ID 353OperationalN
353Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId …OperationalN
401Event ID 401OperationalN
401Data mismatch detected at bottom layer.OperationalN
402Event ID 402OperationalN
402Data mismatch detected at top layer.OperationalN
403Event ID 403OperationalN
403Data mismatch detected at standby.OperationalN
404Event ID 404OperationalN
404Bad IO completion at bottom layer.OperationalN
405Event ID 405OperationalN
405Bad IO completion at top layer.OperationalN
406Event ID 406OperationalN
406Overlapping IOs detectedOperationalN
407Event ID 407OperationalN
407Prohibited IOCTL was rejected.OperationalN

Event ID 1

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk has arrived.

Fields #

NameDescription
DeviceId Int32

Event ID 1: Disk DeviceId has arrived.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
DiskActivity

Description

Disk DeviceId has arrived.

Message #

Disk %1 has arrived

Fields #

NameDescription
DeviceId Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 1,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T03:12:00.2164233+00:00",
    "event_record_id": 5,
    "correlation": {
      "ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
    },
    "execution": {
      "process_id": 4,
      "thread_id": 440
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "DeviceId": "0"
  },
  "message": "Disk 0 has arrived"
}

Event ID 2

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk is claimed by clusbflt.

Fields #

NameDescription
DeviceId Int32

Event ID 2: Disk DeviceId is claimed by clusbflt.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk DeviceId is claimed by clusbflt.

Message #

Disk %1 is claimed by clusbflt

Fields #

NameDescription
DeviceId Int32

Event ID 3

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk is not claimed by clusbflt, Status.

Fields #

NameDescription
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 3: Disk DeviceId is not claimed by clusbflt, Status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
DiskActivity

Description

Disk DeviceId is not claimed by clusbflt, Status Status.

Message #

Disk %1 is not claimed by clusbflt, Status %2

Fields #

NameDescription
DeviceId Int32
Status HexInt32NTSTATUS reference

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 3,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T03:12:00.2164770+00:00",
    "event_record_id": 6,
    "correlation": {
      "ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
    },
    "execution": {
      "process_id": 4,
      "thread_id": 440
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "DeviceId": "0",
    "Status": "0xc0000174"
  },
  "message": "Disk 0 is not claimed by clusbflt, Status Tape partition information could not be found when loading a tape."
}

Event ID 8

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk was removed.

Fields #

NameDescription
DeviceId Int32

Event ID 8: Disk DeviceId was removed.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DiskActivity

Description

Disk DeviceId was removed.

Message #

Disk %1 was removed

Fields #

NameDescription
DeviceId Int32

Event ID 51

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure arrived.

Event ID 51: Enclosure arrived

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure arrived.

Message #

Enclosure arrived

Event ID 52

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure removed.

Event ID 52: Enclosure removed

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
EnclosureActivity

Description

Enclosure removed.

Message #

Enclosure removed

Event ID 101

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, type=) was created for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 101: Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Informational
Task
PathActivity

Description

Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.

Message #

Path %1 (attributes=%3, type=%4) was created for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 101,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T02:33:58.0651744+00:00",
    "event_record_id": 2,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 7116
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "PathId": "1",
    "DeviceId": "-1",
    "Attributes": "0x0",
    "PathType": "0x0"
  },
  "message": "Path 1 (attributes=0x0, type=0x0) was created for device -1"
}

Event ID 102

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, type=) was removed for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 102: Path PathId (attributes=Attributes, type=PathType) was removed for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, type=PathType) was removed for device DeviceId.

Message #

Path %1 (attributes=%3, type=%4) was removed for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
PathType HexInt32

Event ID 103

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was paused for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 103: Path PathId (attributes=Attributes, down path=DownPathId) was paused for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was paused for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was paused for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 104

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was resumed for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 104: Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was resumed for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 105

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path (attributes=, down path=) was resumed on timeout for device.

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 105: Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout for device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
PathActivity

Description

Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout for device DeviceId.

Message #

Path %1 (attributes=%3, down path=%4) was resumed on timeout for device %2

Fields #

NameDescription
PathId Int32
DeviceId Int32
Attributes HexInt32
DownPathId Int32

Event ID 151

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Received request to update membership to , flags =.

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 151: Received request to update membership to Membership, flags = Flags.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Received request to update membership to Membership, flags = Flags.

Message #

Received request to update membership to %1, flags = %2

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 152

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Completed request to update membership to , flags = , status.

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 152: Completed request to update membership to Membership, flags = Flags, status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Completed request to update membership to Membership, flags = Flags, status Status.

Message #

Completed request to update membership to %1, flags = %2, status %3

Fields #

NameDescription
Membership HexInt64
Flags HexInt32
Status HexInt32NTSTATUS reference

Event ID 153

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Completed request to set registration key to , status.

Fields #

NameDescription
RegistrationKey HexInt64
Status HexInt32NTSTATUS reference

Event ID 153: Completed request to set registration key to RegistrationKey, status Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Completed request to set registration key to RegistrationKey, status Status.

Message #

Completed request to set registration key to %1, status %2

Fields #

NameDescription
RegistrationKey HexInt64
Status HexInt32NTSTATUS reference

Event ID 154

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id registered.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 154: Client cluster with Id ClusterId and instance id InstanceId registered.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId registered.

Message #

Client cluster with Id %1 and instance id %2 registered.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 155

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id unregistered on client request.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 155: Client cluster with Id ClusterId and instance id InstanceId unregistered on client request.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId unregistered on client request.

Message #

Client cluster with Id %1 and instance id %2 unregistered on client request.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 156

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Client cluster with Id and instance id unregistered because no hearbeat was received for 1 minute.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 156: Client cluster with Id ClusterId and instance id InstanceId unregistered because no hearbeat was received for 1 minute.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Client cluster with Id ClusterId and instance id InstanceId unregistered because no hearbeat was received for 1 minute.

Message #

Client cluster with Id %1 and instance id %2 unregistered because no hearbeat was received for 1 minute.

Fields #

NameDescription
ClusterId GUID
InstanceId GUID

Event ID 157

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64
CurrentClusterId GUID
CurrentInstanceId GUID
CurrentSequenceNumber HexInt32
CurrentMembershipMask HexInt64

Event ID 157: Received client cluster membership update from node id NodeId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.

Message #

Received client cluster membership update from node id %1. Cluster Id %2, instance id %3, membership sequence %4, nodeset mask %5. Existing cluster id %6, instance id %7, membership sequence %8, nodeset mask %9

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64
CurrentClusterId GUID
CurrentInstanceId GUID
CurrentSequenceNumber HexInt32
CurrentMembershipMask HexInt64

Event ID 158

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Applied client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask .

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64

Event ID 158: Applied client cluster membership update from node id NodeId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Applied client cluster membership update from node id NodeId. Cluster Id ClusterId, instance id InstanceId, membership sequence SequenceNumber, nodeset mask MembershipMask.

Message #

Applied client cluster membership update from node id %1. Cluster Id %2, instance id %3, membership sequence %4, nodeset mask %5.

Fields #

NameDescription
NodeId Int32
ClusterId GUID
InstanceId GUID
SequenceNumber HexInt32
MembershipMask HexInt64

Event ID 159

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Target create for cluster node id for path with cluster Id , instance id . Existing cluster id , instance id . Status=.

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID
Status HexInt32NTSTATUS reference

Event ID 159: Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Level
Informational
Task
ClusterActivity

Description

Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId. Status=Status.

Message #

Target create for cluster node id %1 for path %2 with cluster Id %3, instance id %4. Existing cluster id %5, instance id %6. Status=%7

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID
Status HexInt32NTSTATUS reference

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 159,
    "version": 0,
    "level": 4,
    "task": 4,
    "opcode": 0,
    "keywords": 1152921504606846976,
    "time_created": "2026-05-30T02:33:58.1358814+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 5276
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Connectivity",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "NodeId": "0",
    "PathId": "1",
    "ClusterId": "{00000000-0000-0000-0000-000000000000}",
    "InstanceId": "{00000000-0000-0000-0000-000000000000}",
    "CurrentClusterId": "{00000000-0000-0000-0000-000000000000}",
    "CurrentInstanceId": "{00000000-0000-0000-0000-000000000000}",
    "Status": "0x0"
  },
  "message": "Target create for cluster node id 0 for path 1 with cluster Id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Existing cluster id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Status=STATUS_SUCCESS"
}

Event ID 160

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
ClusterActivity

Description

Target create request rejected from cluster node id for path with cluster Id , instance id . Existing cluster id , instance id .

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID

Event ID 160: Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
ClusterActivity

Description

Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId.

Message #

Target create request rejected from cluster node id %1 for path %2 with cluster Id %3, instance id %4. Existing cluster id %5, instance id %6.

Fields #

NameDescription
NodeId Int32
PathId Int32
ClusterId GUID
InstanceId GUID
CurrentClusterId GUID
CurrentInstanceId GUID

Event ID 201

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
NodeActivity

Description

Node connected to path device.

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 201: Node NodeId connected to path PathId device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
NodeActivity

Description

Node NodeId connected to path PathId device DeviceId.

Message #

Node %1 connected to path %2 device %3

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 202

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
NodeActivity

Description

Node disconnected from path device.

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 202: Node NodeId disconnected from path PathId device DeviceId.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Connectivity
Task
NodeActivity

Description

Node NodeId disconnected from path PathId device DeviceId.

Message #

Node %1 disconnected from path %2 device %3

Fields #

NameDescription
NodeId Int32
PathId Int32
DeviceId Int32

Event ID 251

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Remove all partitions from device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 251: Remove all partitions from device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Remove all partitions from device DeviceGuid (DeviceId), Status=Status.

Message #

Remove all partitions from device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 252

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Trim device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 252: Trim device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Trim device DeviceGuid (DeviceId), Status=Status.

Message #

Trim device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 253

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Hdd Cache partition on device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 253: Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

Message #

Create Hdd Cache partition on device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 254

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Hdd Cache partition on device (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 254: Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.

Message #

Initialize Hdd Cache partition on device %1 (%2), Status=%3.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Status HexInt32NTSTATUS reference

Event ID 255

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Ssd Cache Store partition on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 255: Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Initialize Ssd Cache Store partition on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 256

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Ssd Cache Store partition on device (), Reserve percent, UnusedSize , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
ReservePercentage Int32
UnusedSize Int64
Status HexInt32NTSTATUS reference

Event ID 256: Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.

Message #

Create Ssd Cache Store partition on device %1 (%2), Reserve %3 percent, UnusedSize %4, Status=%5.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
ReservePercentage Int32
UnusedSize Int64
Status HexInt32NTSTATUS reference

Event ID 257

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Bind Hdd device () to Cache Store Partition on device (), Attributes , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
CacheStoreDeviceGuid GUID
CacheStoreDeviceId Int32
Attributes HexInt32
Status HexInt32NTSTATUS reference

Event ID 257: Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.

Message #

Bind Hdd device %1 (%2) to Cache Store Partition %3 on device %4 (%5), Attributes %6, Status=%7.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
CacheStoreDeviceGuid GUID
CacheStoreDeviceId Int32
Attributes HexInt32
Status HexInt32NTSTATUS reference

Event ID 258

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

UnBind Hdd device (), Options , AddedMissingPages=, Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Options HexInt32
AddedMissingPages HexInt32
Status HexInt32NTSTATUS reference

Event ID 258: UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.

Message #

UnBind Hdd device %1 (%2), Options %3, AddedMissingPages=%4, Status=%5.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
Options HexInt32
AddedMissingPages HexInt32
Status HexInt32NTSTATUS reference

Event ID 259

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disable Binding on Sdd device (), Partition Id , Binding , Hdd Device , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Status HexInt32NTSTATUS reference

Event ID 259: Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.

Message #

Disable Binding on Sdd device %1 (%2), Partition Id %3, Binding %4, Hdd Device %5, Status=%6.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Status HexInt32NTSTATUS reference

Event ID 260

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Set Binding Attributes on device (), Partition Id , Binding , Hdd Device , Attributes(mask) (), Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Attributes HexInt32
AttributesMask HexInt32
Status HexInt32NTSTATUS reference

Event ID 260: Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.

Message #

Set Binding Attributes on device %1 (%2), Partition Id %3, Binding %4, Hdd Device %5, Attributes(mask) %6(%7), Status=%8.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
BindingGuid GUID
HddDeviceGuid GUID
Attributes HexInt32
AttributesMask HexInt32
Status HexInt32NTSTATUS reference

Event ID 261

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disabled Read and Write Cache on Ssd Cache Store partition on device (), PartitionId due to IO Error=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 261: Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheConfig

Description

Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.

Message #

Disabled Read and Write Cache on Ssd Cache Store partition on device %1 (%2), PartitionId %3 due to IO Error=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 301

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
Runtime

Description

Runtime error in @, Status=.

Fields #

NameDescription
Function AnsiString
LineNumber Int32
Status HexInt32NTSTATUS reference

Event ID 301: Runtime error in Function@LineNumber, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Level
Warning
Task
Runtime

Description

Runtime error in Function@LineNumber, Status=Status.

Message #

Runtime error in %1@%2, Status=%3.

Fields #

NameDescription
Function AnsiString
Line Number
Status HexInt32NTSTATUS reference
LineNumber Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
    "guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
    "event_source_name": "",
    "event_id": 301,
    "version": 0,
    "level": 3,
    "task": 7,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-05-30T02:33:58.0651726+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 7116
    },
    "channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Function": "TargetMgrImpl::AddPath",
    "Line Number": "1184",
    "Status": "0xc0000034"
  },
  "message": "Runtime error in TargetMgrImpl::AddPath@1184, Status=Object Name not found.."
}

Event ID 351

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Starting to load Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 351: Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Starting to load Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 352

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Loaded Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 352: Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Loaded Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 353

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Failed to load Cache Store on device (), PartitionId , Status=.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 353: Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
CacheLoad

Description

Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.

Message #

Failed to load Cache Store on device %1 (%2), PartitionId %3, Status=%4.

Fields #

NameDescription
DeviceGuid GUID
DeviceId Int32
CacheStorePartitionId GUID
Status HexInt32NTSTATUS reference

Event ID 401

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at bottom layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 401: Data mismatch detected at bottom layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at bottom layer. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 402

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at top layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 402: Data mismatch detected at top layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at top layer. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 403

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at standby. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 403: Data mismatch detected at standby.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Data mismatch detected at standby. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.

Message #

Data mismatch detected at standby. Disk %2, io_offset=%3, io_length=%4, mismatch_offset=%5, mismatch_length=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt64
MismatchOffset HexInt64
MismatchLength HexInt64

Event ID 404

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at bottom layer. Disk , io_offset=, io_length=, status=, informational=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 404: Bad IO completion at bottom layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.

Message #

Bad IO completion at bottom layer. Disk %2, io_offset=%3, io_length=%4, status=%5, informational=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 405

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at top layer. Disk , io_offset=, io_length=, status=, informational=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 405: Bad IO completion at top layer.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Bad IO completion at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.

Message #

Bad IO completion at top layer. Disk %2, io_offset=%3, io_length=%4, status=%5, informational=%6

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
Status HexInt32NTSTATUS reference
Informational HexInt64

Event ID 406

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Overlapping IOs detected.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
ExistingIOOffset HexInt64
ExistingIOLength HexInt32

Event ID 406: Overlapping IOs detected

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Overlapping IOs detected.

Message #

Overlapping IOs detected

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOOffset HexInt64
IOLength HexInt32
ExistingIOOffset HexInt64
ExistingIOLength HexInt32

Event ID 407

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Prohibited IOCTL was rejected. Disk , ioctl=.

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOCTL HexInt32

Event ID 407: Prohibited IOCTL was rejected.

#
Provider
Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
Channel
Operational
Task
DataGuard

Description

Prohibited IOCTL was rejected. Disk DeviceNumber, ioctl=IOCTL.

Message #

Prohibited IOCTL was rejected. Disk %2, ioctl=%3

Fields #

NameDescription
DeviceGuid GUID
DeviceNumber Int32
IOCTL HexInt32

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 923bcb94-58d2-42be-bba9-b1315f363838

Defined in ClusBflt.sys, the binary that emits these events.

Observed on:

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02

Downloads