Microsoft-Windows-Hyper-V-Shared-VHDX

Event	Title	Channel	Sample	Rule
16	Shared VHDX filter started.	Operational	Y	N
32	Shared VHDX filter stopped.	Operational	N	N
48	Successfully attached to volume.	Operational	N	N
64	Skipped attaching to non-CSV volume.	Operational	Y	N
80	Error attaching to volume.	Operational	N	N
96	Successfully detached from volume.	Operational	N	N
112	Error detaching from volume.	Operational	N	N
128	Error opening handle for initiator.	Operational	N	N
129	A deduplicated file was detected for a Shared VHDX.	Operational	N	N
130	A reparse point was detected for a Shared VHDX file.	Operational	N	N
144	Error while mounting Shared VHDX file.	Operational	N	N
256	Shared VHDX file IO Failure.	Diagnostic	N	N
256	Event ID 256	Operational	N	N
272	Shared VHDX file IO took longer than TimeoutInMs ms.	Operational	N	N
288	System out of resources.	Operational	N	N
304	Error reading metadata from the Shared VHDX file.	Operational	N	N
305	No metadata found on the Shared VHDX file.	Diagnostic	N	N
305	Event ID 305	Operational	N	N
320	Error writing metadata to Shared VHDX file.	Operational	N	N
8208	Event ID 8208	Operational	N	N
8208	Persistent Reservation: REGISTER.	Reservation	N	N
8224	Event ID 8224	Operational	N	N
8224	Persistent Reservation: REGISTER AND IGNORE EXISTING KEY.	Reservation	N	N
8240	Event ID 8240	Operational	N	N
8240	Persistent Reservation: RESERVE.	Reservation	N	N
8256	Event ID 8256	Operational	N	N
8256	Persistent Reservation: RELEASE.	Reservation	N	N
8272	Event ID 8272	Operational	N	N
8272	Persistent Reservation: CLEAR.	Reservation	N	N
8288	Event ID 8288	Operational	N	N
8288	Persistent Reservation: PREEMPT.	Reservation	N	N
8304	Event ID 8304	Operational	N	N
8304	Persistent Reservation: PREEMPT AND ABORT.	Reservation	N	N
8320	Event ID 8320	Operational	N	N
8320	Persistent Reservation: Opening state.	Reservation	N	N
8336	Event ID 8336	Operational	N	N
8336	Persistent Reservation: Opening state.	Reservation	N	N
16400	Handle opened by initiator.	Diagnostic	N	N
16400	Event ID 16400	Operational	N	N
16416	Handle closed by initiator.	Diagnostic	N	N
16416	Event ID 16416	Operational	N	N
16432	Shared VHDX file was mounted.	Diagnostic	N	N
16432	Event ID 16432	Operational	N	N
16448	Shared VHDX file was dismounted.	Diagnostic	N	N
16448	Event ID 16448	Operational	N	N
16464	IO was completed.	Diagnostic	N	N
16464	Event ID 16464	Operational	N	N
16480	Persistent Reservation start.	Diagnostic	N	N
16480	Event ID 16480	Operational	N	N
16496	Persistent Reservation end.	Diagnostic	N	N
16496	Event ID 16496	Operational	N	N
16512	Persistent Reservation commit start.	Diagnostic	N	N
16512	Event ID 16512	Operational	N	N
16528	Persistent Reservation commit end.	Diagnostic	N	N
16528	Event ID 16528	Operational	N	N

Event ID 16: Shared VHDX filter started.

Channel: Operational
Level: Informational

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-Shared-VHDX",
    "guid": "{BB510E5F-2EB9-491A-81E4-F04654388F2B}",
    "event_source_name": "",
    "event_id": 16,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-05-30T02:30:35.6310874+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 720
    },
    "channel": "Microsoft-Windows-Hyper-V-Shared-VHDX/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {},
  "message": "Shared VHDX filter started."
}

Event ID 32: Shared VHDX filter stopped.

Channel: Operational

Event ID 48: Successfully attached to volume.

Channel: Operational

Description

Successfully attached to volume. Volume: VolumeName.

Message #

Successfully attached to volume. Volume: %2.

Fields #

Name	Description
`VolumeNameLength` UInt16
`VolumeName` UnicodeString

Event ID 64: Skipped attaching to non-CSV volume.

Channel: Operational
Level: Verbose

Description

Skipped attaching to non-CSV volume. Volume: VolumeName.

Message #

Skipped attaching to non-CSV volume. Volume: %2.

Fields #

Name	Description
`VolumeNameLength` UInt16
`VolumeName` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-Shared-VHDX",
    "guid": "{BB510E5F-2EB9-491A-81E4-F04654388F2B}",
    "event_source_name": "",
    "event_id": 64,
    "version": 0,
    "level": 5,
    "task": 0,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:12:17.3512172+00:00",
    "event_record_id": 1,
    "correlation": {},
    "execution": {
      "process_id": 7116,
      "thread_id": 4676
    },
    "channel": "Microsoft-Windows-Hyper-V-Shared-VHDX/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "VolumeNameLength": "33",
    "VolumeName": "\\Device\\HarddiskVolumeShadowCopy2"
  },
  "message": "Skipped attaching to non-CSV volume. Volume: \\Device\\HarddiskVolumeShadowCopy2."
}

Event ID 80: Error attaching to volume.

Channel: Operational

Description

Error attaching to volume. Volume: VolumeName. Error: Status.

Message #

Error attaching to volume. Volume: %2. Error: %3.

Fields #

Name	Description
`VolumeNameLength` UInt16
`VolumeName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 96: Successfully detached from volume.

Channel: Operational

Description

Successfully detached from volume. Volume: VolumeName.

Message #

Successfully detached from volume. Volume: %2.

Fields #

Name	Description
`VolumeNameLength` UInt16
`VolumeName` UnicodeString

Event ID 112: Error detaching from volume.

Channel: Operational

Description

Error detaching from volume. Volume: VolumeName. Error: Status.

Message #

Error detaching from volume. Volume: %2. Error: %3.

Fields #

Name	Description
`VolumeNameLength` UInt16
`VolumeName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 128: Error opening handle for initiator.

Channel: Operational

Description

Error opening handle for initiator. Initiator: Initiator. Hostname: HostName. File: FileName. Error: Status.

Message #

Error opening handle for initiator. Initiator: %1. Hostname: %3. File: %5. Error: %6.

Fields #

Name	Description
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 129: A deduplicated file was detected for a Shared VHDX.

Channel: Operational

Message #

A deduplicated file was detected for a Shared VHDX.

File: %2

Guidance:
Using a deduplicated file for a Shared VHDX file is not supported and may result in undefined behavior. Turn off data deduplication for the volume and run the PowerShell commandlet Expand-DedupFile on the file to recover.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ReparseTag` HexInt32

Event ID 130: A reparse point was detected for a Shared VHDX file.

Channel: Operational

Message #

A reparse point was detected for a Shared VHDX file.

File: %2
Reparse Point Tag:%3

Guidance:
Shared VHDX files do not support reparse points, such as those used for symbolic links, hierarchical storage, and other technologies. Opening such a file will result in undefined behavior. The type of reparse point found is identified by the reparse point tag located above. Contact your system vendor to determine how to remove the reparse point. Also see http://technet.microsoft.com/en-us/aa365503(v=vs.71).aspx for more information.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ReparseTag` HexInt32

Event ID 144: Error while mounting Shared VHDX file.

Channel: Operational

Description

Error while mounting Shared VHDX file. File: FileName. Error: Status.

Message #

Error while mounting Shared VHDX file. File: %2. Error: %3.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 256: Shared VHDX file IO Failure.

Channel: Diagnostic

Description

Shared VHDX file IO Failure. File: FileName. SCSI operation: ScsiOperation. SRB status: SrbStatus. SCSI status: ScsiStatus. Sense error code: SenseErrorCode. Sense key: SenseKey. Additional sense code: AdditionalSenseCode. Qualifier: AdditionalSenseCodeQualifier. Error: RequestStatus.

Message #

Shared VHDX file IO Failure. File: %2. SCSI operation: %3. SRB status: %4. SCSI status: %5. Sense error code: %6. Sense key: %7. Additional sense code: %8. Qualifier: %9. Error: %10.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ScsiOperation` UInt8
`SrbStatus` UInt8
`ScsiStatus` UInt8
`SenseErrorCode` UInt8
`SenseKey` UInt8
`AdditionalSenseCode` UInt8
`AdditionalSenseCodeQualifier` UInt8
`RequestStatus` HexInt32

Event ID 256

Channel: Operational

Description

Shared VHDX file IO Failure. File: . SCSI operation: . SRB status: . SCSI status: . Sense error code: . Sense key: . Additional sense code: . Qualifier: . Error: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ScsiOperation` UInt8
`SrbStatus` UInt8
`ScsiStatus` UInt8
`SenseErrorCode` UInt8
`SenseKey` UInt8
`AdditionalSenseCode` UInt8
`AdditionalSenseCodeQualifier` UInt8
`RequestStatus` HexInt32

Event ID 272: Shared VHDX file IO took longer than TimeoutInMs ms.

Channel: Operational

Description

Shared VHDX file IO took longer than TimeoutInMs ms. File FileName. SCSI operation: ScsiOperation. Operation time: TimeInMs ms.

Message #

Shared VHDX file IO took longer than %1 ms. File %3. SCSI operation: %4. Operation time: %5 ms.

Fields #

Name	Description
`TimeoutInMs` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`ScsiOperation` UInt8
`TimeInMs` UInt32

Event ID 288: System out of resources.

Channel: Operational

Event ID 304: Error reading metadata from the Shared VHDX file.

Channel: Operational

Message #

Error reading metadata from the Shared VHDX file. File: %2. Error: %3. This indicates a problem when loading the Persistent Reservation information from the VHDX file. The virtual machine may lose access to the shared VHDX file. The virtual machine might recover automatically, but you may need to perform manual recovery actions inside the virtual machine.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 305: No metadata found on the Shared VHDX file.

Channel: Diagnostic

Message #

No metadata found on the Shared VHDX file. File: %2. Error: %3. There is no Persistent Reservation information in the VHDX file being opened. This is expected on the first time the Shared VHDX file is used.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 305

Channel: Operational

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 320: Error writing metadata to Shared VHDX file.

Channel: Operational

Description

Error writing metadata to Shared VHDX file. File: FileName. Error: Status.

Message #

Error writing metadata to Shared VHDX file. File: %2. Error: %3.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 8208

Channel: Operational

Description

Persistent Reservation: REGISTER. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8208: Persistent Reservation: REGISTER.

Channel: Reservation

Description

Persistent Reservation: REGISTER. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: REGISTER. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8224

Channel: Operational

Description

Persistent Reservation: REGISTER AND IGNORE EXISTING KEY. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8224: Persistent Reservation: REGISTER AND IGNORE EXISTING KEY.

Channel: Reservation

Description

Persistent Reservation: REGISTER AND IGNORE EXISTING KEY. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: REGISTER AND IGNORE EXISTING KEY. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8240

Channel: Operational

Description

Persistent Reservation: RESERVE. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8240: Persistent Reservation: RESERVE.

Channel: Reservation

Description

Persistent Reservation: RESERVE. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: RESERVE. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8256

Channel: Operational

Description

Persistent Reservation: RELEASE. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8256: Persistent Reservation: RELEASE.

Channel: Reservation

Description

Persistent Reservation: RELEASE. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: RELEASE. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8272

Channel: Operational

Description

Persistent Reservation: CLEAR. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8272: Persistent Reservation: CLEAR.

Channel: Reservation

Description

Persistent Reservation: CLEAR. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: CLEAR. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8288

Channel: Operational

Description

Persistent Reservation: PREEMPT. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8288: Persistent Reservation: PREEMPT.

Channel: Reservation

Description

Persistent Reservation: PREEMPT. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: PREEMPT. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8304

Channel: Operational

Description

Persistent Reservation: PREEMPT AND ABORT. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8304: Persistent Reservation: PREEMPT AND ABORT.

Channel: Reservation

Description

Persistent Reservation: PREEMPT AND ABORT. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation: PREEMPT AND ABORT. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 8320

Channel: Operational

Description

Persistent Reservation: Opening state. File: . Holder: . Key: . Scope: . Type: . Generation: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Holder` GUID
`Key` UInt64
`Scope` UInt8
`Type` UInt8
`Generation` UInt32

Event ID 8320: Persistent Reservation: Opening state.

Channel: Reservation

Description

Persistent Reservation: Opening state. File: FileName. Holder: Holder. Key: Key. Scope: Scope. Type: Type. Generation: Generation.

Message #

Persistent Reservation: Opening state. File: %2. Holder: %3. Key: %4. Scope: %5. Type: %6. Generation: %7.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Holder` GUID
`Key` UInt64
`Scope` UInt8
`Type` UInt8
`Generation` UInt32

Event ID 8336

Channel: Operational

Description

Persistent Reservation: Opening state. File: . Initiator: . Registration key: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`RegistrationKey` UInt64

Event ID 8336: Persistent Reservation: Opening state.

Channel: Reservation

Description

Persistent Reservation: Opening state. File: FileName. Initiator: Initiator. Registration key: RegistrationKey.

Message #

Persistent Reservation: Opening state. File: %2. Initiator: %3. Registration key: %4.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`RegistrationKey` UInt64

Event ID 16400: Handle opened by initiator.

Channel: Diagnostic

Description

Handle opened by initiator. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Handle opened by initiator. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16400

Channel: Operational

Description

Handle opened by initiator. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16416: Handle closed by initiator.

Channel: Diagnostic

Description

Handle closed by initiator. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Handle closed by initiator. File: %2. Initiator %3. Hostname: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16416

Channel: Operational

Description

Handle closed by initiator. File: . Initiator . Hostname: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16432: Shared VHDX file was mounted.

Channel: Diagnostic

Description

Shared VHDX file was mounted. File: FileName. Mount time: TimeInMs ms. Total Size: TotalSize. Log Size: LogSize.

Message #

Shared VHDX file was mounted. File: %2. Mount time: %3 ms. Total Size: %4. Log Size: %5.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`TimeInMs` UInt32
`TotalSize` UInt64
`LogSize` UInt64

Event ID 16432

Channel: Operational

Description

Shared VHDX file was mounted. File: . Mount time: ms. Total Size: . Log Size: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`TimeInMs` UInt32
`TotalSize` UInt64
`LogSize` UInt64

Event ID 16448: Shared VHDX file was dismounted.

Channel: Diagnostic

Description

Shared VHDX file was dismounted. File: FileName.

Message #

Shared VHDX file was dismounted. File: %2.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString

Event ID 16448

Channel: Operational

Description

Shared VHDX file was dismounted. File: .

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString

Event ID 16464: IO was completed.

Channel: Diagnostic

Description

IO was completed. File: FileName. SCSI operation: ScsiOperation. Operation time: TimeInMs ms.

Message #

IO was completed. File: %2. SCSI operation: %3. Operation time: %4 ms.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ScsiOperation` UInt8
`TimeInMs` UInt32

Event ID 16464

Channel: Operational

Description

IO was completed. File: . SCSI operation: . Operation time: ms.

Fields #

Name	Description
`FileNameLength` UInt16
`FileName` UnicodeString
`ScsiOperation` UInt8
`TimeInMs` UInt32

Event ID 16480: Persistent Reservation start.

Channel: Diagnostic

Description

Persistent Reservation start. PR: PrOperation. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation start. PR: %1. File: %3. Initiator %4. Hostname: %6.

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16480

Channel: Operational

Description

Persistent Reservation start. PR: . File: . Initiator . Hostname: .

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16496: Persistent Reservation end.

Channel: Diagnostic

Description

Persistent Reservation end. PR: . File: . Initiator . Hostname: . SRB status: . SCSI status: . Sense error code: . Sense key: . Additional sense code: . Qualifier: . Error: .

Message #

Persistent Reservation end. PR: %1. File: %3. Initiator %4. Hostname: %6. SRB status: %7. SCSI status: %8. Sense error code: %9. Sense key: %10. Additional sense code: %11. Qualifier: %12. Error: %13.

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString
`SrbStatus` UInt8
`ScsiStatus` UInt8
`SenseErrorCode` UInt8
`SenseKey` UInt8
`AdditionalSenseCode` UInt8
`AdditionalSenseCodeQualifier` UInt8
`RequestStatus` HexInt32

Event ID 16496

Channel: Operational

Description

Persistent Reservation end. PR: . File: . Initiator . Hostname: . SRB status: . SCSI status: . Sense error code: . Sense key: . Additional sense code: . Qualifier: . Error: .

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString
`SrbStatus` UInt8
`ScsiStatus` UInt8
`SenseErrorCode` UInt8
`SenseKey` UInt8
`AdditionalSenseCode` UInt8
`AdditionalSenseCodeQualifier` UInt8
`RequestStatus` HexInt32

Event ID 16512: Persistent Reservation commit start.

Channel: Diagnostic

Description

Persistent Reservation commit start. PR PrOperation. File: FileName. Initiator Initiator. Hostname: HostName.

Message #

Persistent Reservation commit start. PR %1. File: %3. Initiator %4. Hostname: %6.

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16512

Channel: Operational

Description

Persistent Reservation commit start. PR . File: . Initiator . Hostname: .

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString

Event ID 16528: Persistent Reservation commit end.

Channel: Diagnostic

Description

Persistent Reservation commit end. PR: PrOperation. File: FileName. Initiator Initiator. Hostname: HostName. Status: Status.

Message #

Persistent Reservation commit end. PR: %1. File: %3. Initiator %4. Hostname: %6. Status: %7.

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 16528

Channel: Operational

Description

Persistent Reservation commit end. PR: . File: . Initiator . Hostname: . Status: .

Fields #

Name	Description
`PrOperation` UInt32
`FileNameLength` UInt16
`FileName` UnicodeString
`Initiator` GUID
`HostNameLength` UInt16
`HostName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Provenance

ETW provider GUID bb510e5f-2eb9-491a-81e4-f04654388f2b

Defined in svhdxflt.sys, the binary that emits these events.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB