Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic
90 events across 3 channels
Event ID 1: Disk DeviceId has arrived.
#Description
Disk DeviceId has arrived.
Message #
Fields #
| Name | Description |
|---|---|
DeviceId Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
"guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
"event_source_name": "",
"event_id": 1,
"version": 0,
"level": 4,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T03:12:00.2164233+00:00",
"event_record_id": 5,
"correlation": {
"ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
},
"execution": {
"process_id": 4,
"thread_id": 440
},
"channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeviceId": "0"
},
"message": "Disk 0 has arrived"
}
Event ID 2: Disk DeviceId is claimed by clusbflt.
#Event ID 3
#Description
Disk is not claimed by clusbflt, Status.
Fields #
| Name | Description |
|---|---|
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 3: Disk DeviceId is not claimed by clusbflt, Status Status.
#Description
Disk DeviceId is not claimed by clusbflt, Status Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
"guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
"event_source_name": "",
"event_id": 3,
"version": 0,
"level": 4,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T03:12:00.2164770+00:00",
"event_record_id": 6,
"correlation": {
"ActivityID": "{14429F51-EFE2-000A-529F-4214E2EFDC01}"
},
"execution": {
"process_id": 4,
"thread_id": 440
},
"channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"DeviceId": "0",
"Status": "0xc0000174"
},
"message": "Disk 0 is not claimed by clusbflt, Status Tape partition information could not be found when loading a tape."
}
Event ID 8: Disk DeviceId was removed.
#Event ID 51
#Description
Enclosure arrived.
Event ID 52
#Description
Enclosure removed.
Event ID 101
#Description
Path (attributes=, type=) was created for device.
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
PathType HexInt32 |
Event ID 101: Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.
#Description
Path PathId (attributes=Attributes, type=PathType) was created for device DeviceId.
Message #
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
PathType HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
"guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
"event_source_name": "",
"event_id": 101,
"version": 0,
"level": 4,
"task": 3,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:33:58.0651744+00:00",
"event_record_id": 2,
"correlation": {},
"execution": {
"process_id": 4,
"thread_id": 7116
},
"channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"PathId": "1",
"DeviceId": "-1",
"Attributes": "0x0",
"PathType": "0x0"
},
"message": "Path 1 (attributes=0x0, type=0x0) was created for device -1"
}
Event ID 102
#Description
Path (attributes=, type=) was removed for device.
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
PathType HexInt32 |
Event ID 102: Path PathId (attributes=Attributes, type=PathType) was removed for device DeviceId.
#Event ID 103
#Description
Path (attributes=, down path=) was paused for device.
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
DownPathId Int32 |
Event ID 103: Path PathId (attributes=Attributes, down path=DownPathId) was paused for device DeviceId.
#Event ID 104
#Description
Path (attributes=, down path=) was resumed for device.
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
DownPathId Int32 |
Event ID 104: Path PathId (attributes=Attributes, down path=DownPathId) was resumed for device DeviceId.
#Event ID 105
#Description
Path (attributes=, down path=) was resumed on timeout for device.
Fields #
| Name | Description |
|---|---|
PathId Int32 | |
DeviceId Int32 | |
Attributes HexInt32 | |
DownPathId Int32 |
Event ID 105: Path PathId (attributes=Attributes, down path=DownPathId) was resumed on timeout for device DeviceId.
#Event ID 151
#Description
Received request to update membership to , flags =.
Fields #
| Name | Description |
|---|---|
Membership HexInt64 | |
Flags HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 151: Received request to update membership to Membership, flags = Flags.
#Description
Received request to update membership to Membership, flags = Flags.
Message #
Fields #
| Name | Description |
|---|---|
Membership HexInt64 | |
Flags HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 152
#Description
Completed request to update membership to , flags = , status.
Fields #
| Name | Description |
|---|---|
Membership HexInt64 | |
Flags HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 152: Completed request to update membership to Membership, flags = Flags, status Status.
#Description
Completed request to update membership to Membership, flags = Flags, status Status.
Message #
Fields #
| Name | Description |
|---|---|
Membership HexInt64 | |
Flags HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 153
#Description
Completed request to set registration key to , status.
Fields #
| Name | Description |
|---|---|
RegistrationKey HexInt64 | |
Status HexInt32 | NTSTATUS reference |
Event ID 153: Completed request to set registration key to RegistrationKey, status Status.
#Description
Completed request to set registration key to RegistrationKey, status Status.
Message #
Fields #
| Name | Description |
|---|---|
RegistrationKey HexInt64 | |
Status HexInt32 | NTSTATUS reference |
Event ID 154
#Description
Client cluster with Id and instance id registered.
Fields #
| Name | Description |
|---|---|
ClusterId GUID | |
InstanceId GUID |
Event ID 154: Client cluster with Id ClusterId and instance id InstanceId registered.
#Event ID 155
#Description
Client cluster with Id and instance id unregistered on client request.
Fields #
| Name | Description |
|---|---|
ClusterId GUID | |
InstanceId GUID |
Event ID 155: Client cluster with Id ClusterId and instance id InstanceId unregistered on client request.
#Event ID 156
#Description
Client cluster with Id and instance id unregistered because no hearbeat was received for 1 minute.
Fields #
| Name | Description |
|---|---|
ClusterId GUID | |
InstanceId GUID |
Event ID 156: Client cluster with Id ClusterId and instance id InstanceId unregistered because no hearbeat was received for 1 minute.
#Event ID 157
#Description
Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
SequenceNumber HexInt32 | |
MembershipMask HexInt64 | |
CurrentClusterId GUID | |
CurrentInstanceId GUID | |
CurrentSequenceNumber HexInt32 | |
CurrentMembershipMask HexInt64 |
Event ID 157: Received client cluster membership update from node id NodeId.
#Description
Received client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask . Existing cluster id , instance id , membership sequence , nodeset mask.
Message #
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
SequenceNumber HexInt32 | |
MembershipMask HexInt64 | |
CurrentClusterId GUID | |
CurrentInstanceId GUID | |
CurrentSequenceNumber HexInt32 | |
CurrentMembershipMask HexInt64 |
Event ID 158
#Description
Applied client cluster membership update from node id . Cluster Id , instance id , membership sequence , nodeset mask .
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
SequenceNumber HexInt32 | |
MembershipMask HexInt64 |
Event ID 158: Applied client cluster membership update from node id NodeId.
#Description
Applied client cluster membership update from node id NodeId. Cluster Id ClusterId, instance id InstanceId, membership sequence SequenceNumber, nodeset mask MembershipMask.
Message #
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
SequenceNumber HexInt32 | |
MembershipMask HexInt64 |
Event ID 159
#Description
Target create for cluster node id for path with cluster Id , instance id . Existing cluster id , instance id . Status=.
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
CurrentClusterId GUID | |
CurrentInstanceId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 159: Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.
#Description
Target create for cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId. Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
CurrentClusterId GUID | |
CurrentInstanceId GUID | |
Status HexInt32 | NTSTATUS reference |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
"guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
"event_source_name": "",
"event_id": 159,
"version": 0,
"level": 4,
"task": 4,
"opcode": 0,
"keywords": 1152921504606846976,
"time_created": "2026-05-30T02:33:58.1358814+00:00",
"event_record_id": 1,
"correlation": {},
"execution": {
"process_id": 4,
"thread_id": 5276
},
"channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Connectivity",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"NodeId": "0",
"PathId": "1",
"ClusterId": "{00000000-0000-0000-0000-000000000000}",
"InstanceId": "{00000000-0000-0000-0000-000000000000}",
"CurrentClusterId": "{00000000-0000-0000-0000-000000000000}",
"CurrentInstanceId": "{00000000-0000-0000-0000-000000000000}",
"Status": "0x0"
},
"message": "Target create for cluster node id 0 for path 1 with cluster Id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Existing cluster id {00000000-0000-0000-0000-000000000000}, instance id {00000000-0000-0000-0000-000000000000}. Status=STATUS_SUCCESS"
}
Event ID 160
#Description
Target create request rejected from cluster node id for path with cluster Id , instance id . Existing cluster id , instance id .
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
CurrentClusterId GUID | |
CurrentInstanceId GUID |
Event ID 160: Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId.
#Description
Target create request rejected from cluster node id NodeId for path PathId with cluster Id ClusterId, instance id InstanceId. Existing cluster id CurrentClusterId, instance id CurrentInstanceId.
Message #
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
ClusterId GUID | |
InstanceId GUID | |
CurrentClusterId GUID | |
CurrentInstanceId GUID |
Event ID 201
#Description
Node connected to path device.
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
DeviceId Int32 |
Event ID 201: Node NodeId connected to path PathId device DeviceId.
#Event ID 202
#Description
Node disconnected from path device.
Fields #
| Name | Description |
|---|---|
NodeId Int32 | |
PathId Int32 | |
DeviceId Int32 |
Event ID 202: Node NodeId disconnected from path PathId device DeviceId.
#Event ID 251
#Description
Remove all partitions from device (), Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 251: Remove all partitions from device DeviceGuid (DeviceId), Status=Status.
#Description
Remove all partitions from device DeviceGuid (DeviceId), Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 252
#Description
Trim device (), Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 252: Trim device DeviceGuid (DeviceId), Status=Status.
#Description
Trim device DeviceGuid (DeviceId), Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 253
#Description
Create Hdd Cache partition on device (), Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 253: Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.
#Description
Create Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 254
#Description
Initialize Hdd Cache partition on device (), Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 254: Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.
#Description
Initialize Hdd Cache partition on device DeviceGuid (DeviceId), Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 255
#Description
Initialize Ssd Cache Store partition on device (), PartitionId , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 255: Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
#Description
Initialize Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 256
#Description
Create Ssd Cache Store partition on device (), Reserve percent, UnusedSize , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
ReservePercentage Int32 | |
UnusedSize Int64 | |
Status HexInt32 | NTSTATUS reference |
Event ID 256: Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.
#Description
Create Ssd Cache Store partition on device DeviceGuid (DeviceId), Reserve ReservePercentage percent, UnusedSize UnusedSize, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
ReservePercentage Int32 | |
UnusedSize Int64 | |
Status HexInt32 | NTSTATUS reference |
Event ID 257
#Description
Bind Hdd device () to Cache Store Partition on device (), Attributes , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
CacheStoreDeviceGuid GUID | |
CacheStoreDeviceId Int32 | |
Attributes HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 257: Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.
#Description
Bind Hdd device DeviceGuid (DeviceId) to Cache Store Partition CacheStorePartitionId on device CacheStoreDeviceGuid (CacheStoreDeviceId), Attributes Attributes, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
CacheStoreDeviceGuid GUID | |
CacheStoreDeviceId Int32 | |
Attributes HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 258
#Description
UnBind Hdd device (), Options , AddedMissingPages=, Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Options HexInt32 | |
AddedMissingPages HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 258: UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.
#Description
UnBind Hdd device DeviceGuid (DeviceId), Options Options, AddedMissingPages=AddedMissingPages, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
Options HexInt32 | |
AddedMissingPages HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 259
#Description
Disable Binding on Sdd device (), Partition Id , Binding , Hdd Device , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
BindingGuid GUID | |
HddDeviceGuid GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 259: Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.
#Description
Disable Binding on Sdd device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
BindingGuid GUID | |
HddDeviceGuid GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 260
#Description
Set Binding Attributes on device (), Partition Id , Binding , Hdd Device , Attributes(mask) (), Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
BindingGuid GUID | |
HddDeviceGuid GUID | |
Attributes HexInt32 | |
AttributesMask HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 260: Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.
#Description
Set Binding Attributes on device DeviceGuid (DeviceId), Partition Id CacheStorePartitionId, Binding BindingGuid, Hdd Device HddDeviceGuid, Attributes(mask) Attributes(AttributesMask), Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
BindingGuid GUID | |
HddDeviceGuid GUID | |
Attributes HexInt32 | |
AttributesMask HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 261
#Description
Disabled Read and Write Cache on Ssd Cache Store partition on device (), PartitionId due to IO Error=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 261: Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.
#Description
Disabled Read and Write Cache on Ssd Cache Store partition on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId due to IO Error=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 301
#Description
Runtime error in @, Status=.
Fields #
| Name | Description |
|---|---|
Function AnsiString | |
LineNumber Int32 | |
Status HexInt32 | NTSTATUS reference |
Event ID 301: Runtime error in Function@LineNumber, Status=Status.
#Description
Runtime error in Function@LineNumber, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
Function AnsiString | |
Line Number | |
Status HexInt32 | NTSTATUS reference |
LineNumber Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic",
"guid": "{923BCB94-58D2-42BE-BBA9-B1315F363838}",
"event_source_name": "",
"event_id": 301,
"version": 0,
"level": 3,
"task": 7,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-30T02:33:58.0651726+00:00",
"event_record_id": 1,
"correlation": {},
"execution": {
"process_id": 4,
"thread_id": 7116
},
"channel": "Microsoft-Windows-FailoverClustering-ClusBflt/Operational",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"Function": "TargetMgrImpl::AddPath",
"Line Number": "1184",
"Status": "0xc0000034"
},
"message": "Runtime error in TargetMgrImpl::AddPath@1184, Status=Object Name not found.."
}
Event ID 351
#Description
Starting to load Cache Store on device (), PartitionId , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 351: Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
#Description
Starting to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 352
#Description
Loaded Cache Store on device (), PartitionId , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 352: Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
#Description
Loaded Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 353
#Description
Failed to load Cache Store on device (), PartitionId , Status=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 353: Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
#Description
Failed to load Cache Store on device DeviceGuid (DeviceId), PartitionId CacheStorePartitionId, Status=Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceId Int32 | |
CacheStorePartitionId GUID | |
Status HexInt32 | NTSTATUS reference |
Event ID 401
#Description
Data mismatch detected at bottom layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 401: Data mismatch detected at bottom layer.
#Description
Data mismatch detected at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 402
#Description
Data mismatch detected at top layer. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 402: Data mismatch detected at top layer.
#Description
Data mismatch detected at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 403
#Description
Data mismatch detected at standby. Disk , io_offset=, io_length=, mismatch_offset=, mismatch_length=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 403: Data mismatch detected at standby.
#Description
Data mismatch detected at standby. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, mismatch_offset=MismatchOffset, mismatch_length=MismatchLength.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt64 | |
MismatchOffset HexInt64 | |
MismatchLength HexInt64 |
Event ID 404
#Description
Bad IO completion at bottom layer. Disk , io_offset=, io_length=, status=, informational=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Informational HexInt64 |
Event ID 404: Bad IO completion at bottom layer.
#Description
Bad IO completion at bottom layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Informational HexInt64 |
Event ID 405
#Description
Bad IO completion at top layer. Disk , io_offset=, io_length=, status=, informational=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Informational HexInt64 |
Event ID 405: Bad IO completion at top layer.
#Description
Bad IO completion at top layer. Disk DeviceNumber, io_offset=IOOffset, io_length=IOLength, status=Status, informational=Informational.
Message #
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt32 | |
Status HexInt32 | NTSTATUS reference |
Informational HexInt64 |
Event ID 406
#Description
Overlapping IOs detected.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOOffset HexInt64 | |
IOLength HexInt32 | |
ExistingIOOffset HexInt64 | |
ExistingIOLength HexInt32 |
Event ID 406: Overlapping IOs detected
#Event ID 407
#Description
Prohibited IOCTL was rejected. Disk , ioctl=.
Fields #
| Name | Description |
|---|---|
DeviceGuid GUID | |
DeviceNumber Int32 | |
IOCTL HexInt32 |
Event ID 407: Prohibited IOCTL was rejected.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 923bcb94-58d2-42be-bba9-b1315f363838
Defined in ClusBflt.sys, the binary that emits these events.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02