detection.wiki

Microsoft-Windows-FailoverClustering-ClusRes-Diagnostic

EventTitleChannelSampleRule
1Event ID 1OperationalNN
1Key Value Store StoreName with Manager ManagerName and path StorePath has been …OperationalNN
2Event ID 2OperationalNN
2Key Value Store StoreName with Manager ManagerName and path StorePath failed …OperationalNN

Event ID 1

#
Channel
Operational

Description

Key Value Store with Manager and path has been initialized.

Fields #

NameDescription
ManagerName UnicodeString
StoreName UnicodeString
StorePath UnicodeString

Event ID 1: Key Value Store StoreName with Manager ManagerName and path StorePath has been initialized.

#
Channel
Operational

Message #

Key Value Store %2 with Manager %1 and path %3 has been initialized.

Fields #

NameDescription
ManagerName UnicodeString
StoreName UnicodeString
StorePath UnicodeString

Event ID 2

#
Channel
Operational

Description

Key Value Store with Manager and path failed with status.

Fields #

NameDescription
Status HexInt32NTSTATUS reference
ManagerName UnicodeString
StoreName UnicodeString
StorePath UnicodeString

Event ID 2: Key Value Store StoreName with Manager ManagerName and path StorePath failed with status Status.

#
Channel
Operational

Message #

Key Value Store %3 with Manager %2 and path %4 failed with status %1

Fields #

NameDescription
Status HexInt32NTSTATUS reference
ManagerName UnicodeString
StoreName UnicodeString
StorePath UnicodeString