Microsoft-Windows-Hyper-V-SynthStor

Event	Title	Channel	Sample	Rule
3584	[VMID VmId]	Operational	N	N
3584	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N	N
3585	[VMID VmId]	Operational	N	N
3585	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N	N
3586	[VMID VmId]	Operational	N	N
3586	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N	N
3587	[VMID VmId]	Operational	N	N
3587	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N	N
12134	Remote SMB share does not support resiliency	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12135	Remote SMB share does not support resiliency	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12136	'VmName': The storage controller resource allocation setting data object …	Operational	N	N
12136	'VmName': The storage controller resource allocation setting data object …	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12137	The storage controller resource allocation setting data object 'String' cannot …	Operational	N	N
12137	The storage controller resource allocation setting data object 'String' cannot …	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12138	'VmName': The storage drive resource allocation setting data object 'String' …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12139	The storage drive resource allocation setting data object 'String' cannot be …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12140	'VmName': Attachment 'String' failed to open because of error: 'ErrorCodeString' …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12141	Attachment 'String' failed to open because of error: 'ErrorCodeString'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12142	'VmName': Virtual disk 'String' failed to open because a problem occurred when …	Operational	N	N
12142	'VmName': Virtual disk 'String' failed to open because a problem occurred when …	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12143	Virtual disk 'String' failed to open because a problem occurred when attempting …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12144	'VmName': Virtual disk 'String' failed to open because the file is corrupt or is …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12145	Virtual disk 'String' failed to open because the file is corrupt or is too small	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12148	'VmName': ErrorCodeString (String) started successfully	Operational	N	N
12148	'VmlEventLog.VmName': VmlEventLog.ErrorCodeString (VmlEventLog.String) started …	Microsoft-Windows-Hyper-V-Worker-Admin	Y	N
12149	'VmName': ErrorCodeString (String) started successfully	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12150	'VmName': Failed to open 'String': Compressed virtual hard disks are not …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12151	Failed to open 'String': Compressed virtual hard disks are not supported	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12152	'VmName': Failed to configure 'String': The storage where the virtual hard disk …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12153	Failed to configure 'String': The storage where the virtual hard disk is located …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12154	'VmName': Failed to configure 'String': Virtual hard disk sharing and storage …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12155	Failed to configure 'String': Virtual hard disk sharing and storage Quality of …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12156	'VmName': Failed to configure 'String': Virtual hard disk sharing settings …	Operational	N	N
12156	'.	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12157	Failed to configure 'String': Virtual hard disk sharing settings cannot be …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12158	'VmName': Failed to configure 'String': To disable virtual hard disk sharing, …	Operational	N	N
12158	'VmName': Failed to configure 'String': To disable virtual hard disk sharing, …	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12159	Failed to configure 'String': To disable virtual hard disk sharing, you must …	Operational	N	N
12159	Failed to configure 'String': To disable virtual hard disk sharing, you must …	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12220	'VmName' Param1: The attempt to attach 'String' to location Param2 of IDE …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12221	Param1: The attempt to attach 'String' to location Param2 of IDE Controller …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12240	'VmName': Attachment 'String' could not be found due to error: 'ErrorCodeString' …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12241	Attachment 'String' could not be found due to error: 'ErrorCodeString'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12242	'VmName': The device 'String' failed to mount because the device is already …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12243	The device 'String' failed to mount because the device is already mounted …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12244	'VmName': The device 'String' failed to mount because the device is in use by …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12245	The device 'String' failed to mount because the device is in use by another …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12246	'VmName': The physical device 'String' could not be found	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12247	The physical device could not be found	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12248	'VmName': The file name 'String' is reserved for use by Windows	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12249	The file name 'String' is reserved for use by Windows	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12260	'VmName': Attachment 'String' is read-only	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12261	Attachment 'String' is read-only	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12280	'VmName': The Machine Account 'Param1' does not have Param2 access to file share …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12281	The Machine Account 'Param1' does not have Param2 access to file share 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12290	'VmName': Param1 Account does not have permission to open attachment 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12291	Param1 Account does not have permission to open attachment 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12292	'VmName' encountered an error while calculating the size of the disk chain for …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12293	There was an error while calculating the size of the disk chain for disk metrics	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12350	'VmName': An error occurred while attempting to start the virtual machine	Operational	N	N
12350	'.	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12351	An error occurred while attempting to start the virtual machine	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12352	'VmName': An error occurred while attaching 'String' to the virtual machine …	Operational	N	N
12352	'.	Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12353	An error occurred while attaching 'String' to the virtual machine because he …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12602	Virtual machine 'VmName' is configured to allow unfiltered SCSI commands for …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12603	The virtual machine is configured to allow unfiltered SCSI commands for physical …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12620	'VmName': The attempt to get information for attachment 'String' failed	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12621	The attempt to get information for attachment 'String' failed	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12622	'VmName': Enabling change tracking failed for the drive 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12623	'VmName':Failed to configure 'String': Virtual hard disk sharing must be enabled …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12624	Failed to configure 'String': Virtual hard disk sharing must be enabled on VHD …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12625	'VmName': Failed to enable virtual hard disk resiliency for the drive 'String' …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12626	'VmName': Failed to enable virtual hard disk resiliency for the drive 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12628	'VmName': Failed to get the recovery status for the drive 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12629	'VmName': Failed to get the recovery status for the drive 'String'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12630	'VmName': Virtual hard disk resiliency failed to recover the drive 'Path'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12631	'VmName': The shared virtual hard disk drive 'String' was unmounted and will be …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12632	'VmName': The shared virtual hard disk drive 'String' that was unmounted …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12633	'VmName': An attempt to recover the shared virtual hard disk drive 'String' has …	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12634	'VmName': Virtual hard disk resiliency successfully recovered drive 'Path'	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12635	'VmName': Virtual hard disk 'Path' received a resiliency status notification	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12636	'VmName': Virtual hard disk 'Path' has detected a recoverable error	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12637	'VmName': Virtual hard disk 'Path' has not yet recovered from a previous error	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12638	'VmName': 'String' is an invalid pool id for this resource	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12639	'String' is an invalid pool id for this resource	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12640	'VmName': Unsupported attachment Path 'String' in the drive	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N
12641	Unsupported attachment Path 'String' in the drive	Operational, Microsoft-Windows-Hyper-V-Worker-Admin	N	N

Event ID 3584: [VMID VmId]

Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3584: [VMID VmId] TraceData.

Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3585: [VMID VmId]

Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3585: [VMID VmId] TraceData.

Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3586: [VMID VmId]

Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3586: [VMID VmId] TraceData.

Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3587: [VMID VmId]

Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3587: [VMID VmId] TraceData.

Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 12134: Remote SMB share does not support resiliency

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Remote SMB share does not support resiliency. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12135: Remote SMB share does not support resiliency

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12136: 'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it

Channel: Operational

Description

'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12136: 'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still att...

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it. (Virtual machine ID VmId).

Message #

'%1': The storage controller resource allocation setting data object '%3' cannot be deleted because one or more storage drive objects are still attached to it. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12137: The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12137: The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached ...

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it.

Message #

The storage controller resource allocation setting data object '%3' cannot be deleted because one or more storage drive objects are still attached to it.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12138: 'VmName': The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12139: The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12140: 'VmName': Attachment 'String' failed to open because of error: 'ErrorCodeString' (ErrorCode)

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Attachment 'String' failed to open because of error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12141: Attachment 'String' failed to open because of error: 'ErrorCodeString'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12142: 'VmName': Virtual disk 'String' failed to open because a problem occurred when attempting to open a virtual disk in the differencing chain, 'Param1' (referenced by 'Param2'): 'ErrorCodeString' (Err...

Channel: Operational

Description

'VmName': Virtual disk 'String' failed to open because a problem occurred when attempting to open a virtual disk in the differencing chain, 'Param1' (referenced by 'Param2'): 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12142: 'VmName': Virtual disk 'String' failed to open because a problem occurred when attempting to open a virtual disk in the differencing chain, 'Param1'.

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Message #

'%1': Virtual disk '%3' failed to open because a problem occurred when attempting to open a virtual disk in the differencing chain, '%6' (referenced by '%7'): '%4' (%5). (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12143: Virtual disk 'String' failed to open because a problem occurred when attempting to open a virtual disk in the differencing chain, 'Param1': 'ErrorCodeString'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12144: 'VmName': Virtual disk 'String' failed to open because the file is corrupt or is too small

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual disk 'String' failed to open because the file is corrupt or is too small. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12145: Virtual disk 'String' failed to open because the file is corrupt or is too small

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12148: 'VmName': ErrorCodeString (String) started successfully

Channel: Operational

Description

'VmName': ErrorCodeString (String) started successfully. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12148: 'VmlEventLog.VmName': VmlEventLog.ErrorCodeString (VmlEventLog.String) started successfully.

Channel: Microsoft-Windows-Hyper-V-Worker-Admin
Level: Informational

Description

'VmlEventLog.VmName': VmlEventLog.ErrorCodeString (VmlEventLog.String) started successfully. (Virtual machine ID VmlEventLog.VmId).

Message #

'%1': %4 (%3) started successfully. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-SynthStor",
    "guid": "EDACD782-2564-4497-ADE6-7199377850F2",
    "event_source_name": "",
    "event_id": 12148,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:31:57.929689+00:00",
    "event_record_id": 5,
    "correlation": {
      "ActivityID": "164E10E5-B120-0006-8919-4E1620B1DC01"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 9460
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
    }
  },
  "user_data": {
    "VmlEventLog": {
      "VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "String": "FD1D2CBD-CE7C-535C-966B-EB5F811C95F0",
      "ErrorCodeString": null,
      "ErrorCode": 0,
      "Param1": null,
      "Param2": null
    }
  },
  "message": ""
}

Event ID 12149: 'VmName': ErrorCodeString (String) started successfully

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': ErrorCodeString (String) started successfully. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12150: 'VmName': Failed to open 'String': Compressed virtual hard disks are not supported

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12151: Failed to open 'String': Compressed virtual hard disks are not supported

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12152: 'VmName': Failed to configure 'String': The storage where the virtual hard disk is located does not support virtual hard disk sharing

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12153: Failed to configure 'String': The storage where the virtual hard disk is located does not support virtual hard disk sharing

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12154: 'VmName': Failed to configure 'String': Virtual hard disk sharing and storage Quality of Service cannot be enabled at the same time

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12155: Failed to configure 'String': Virtual hard disk sharing and storage Quality of Service cannot be enabled at the same time

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12156: 'VmName': Failed to configure 'String': Virtual hard disk sharing settings cannot be modified because the virtual machine is running

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12156: '.

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Message #

'%1': Failed to configure '%3': Virtual hard disk sharing settings cannot be modified because the virtual machine is running. To enable or disable virtual hard disk sharing, shut down the virtual machine and then try again.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12157: Failed to configure 'String': Virtual hard disk sharing settings cannot be modified because the virtual machine is running

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12158: 'VmName': Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12158: 'VmName': Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to us...

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk.

Message #

'%1': Failed to configure '%3': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12159: Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12159: Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this...

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Failed to configure 'String': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk.

Message #

Failed to configure '%3': To disable virtual hard disk sharing, you must first shut down all virtual machines that have been configured to use this shared virtual hard disk.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12220: 'VmName' Param1: The attempt to attach 'String' to location Param2 of IDE Controller failed

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' Param1: The attempt to attach 'String' to location Param2 of IDE Controller failed. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12221: Param1: The attempt to attach 'String' to location Param2 of IDE Controller failed

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Param1: The attempt to attach 'String' to location Param2 of IDE Controller failed. Error: 'ErrorCodeString'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12240: 'VmName': Attachment 'String' could not be found due to error: 'ErrorCodeString' (ErrorCode)

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Attachment 'String' could not be found due to error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12241: Attachment 'String' could not be found due to error: 'ErrorCodeString'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12242: 'VmName': The device 'String' failed to mount because the device is already mounted read-only, and an attempt was made to mount it read/write

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The device 'String' failed to mount because the device is already mounted read-only, and an attempt was made to mount it read/write. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12243: The device 'String' failed to mount because the device is already mounted read-only, and an attempt was made to mount it read/write

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12244: 'VmName': The device 'String' failed to mount because the device is in use by another process

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The device 'String' failed to mount because the device is in use by another process. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12245: The device 'String' failed to mount because the device is in use by another process

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12246: 'VmName': The physical device 'String' could not be found

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The physical device 'String' could not be found. It may have been removed from the system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12247: The physical device could not be found

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

The physical device could not be found. It may have been removed from the system. Error: 'ErrorCodeString'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12248: 'VmName': The file name 'String' is reserved for use by Windows

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The file name 'String' is reserved for use by Windows. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12249: The file name 'String' is reserved for use by Windows

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12260: 'VmName': Attachment 'String' is read-only

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Attachment 'String' is read-only. Please provide read/write access to add the attachment. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12261: Attachment 'String' is read-only

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Attachment 'String' is read-only. Please provide read/write access to add the attachment. Error: 'ErrorCodeString'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12280: 'VmName': The Machine Account 'Param1' does not have Param2 access to file share 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The Machine Account 'Param1' does not have Param2 access to file share 'String'. Please add this machine account to the file share security group. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12281: The Machine Account 'Param1' does not have Param2 access to file share 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Machine Account 'Param1' does not have Param2 access to file share 'String'. Please add this computer account to the security group of the file share. Error: 'ErrorCodeString'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12290: 'VmName': Param1 Account does not have permission to open attachment 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Param1 Account does not have permission to open attachment 'String'. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12291: Param1 Account does not have permission to open attachment 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Param1 Account does not have permission to open attachment 'String'. Error: 'ErrorCodeString'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12292: 'VmName' encountered an error while calculating the size of the disk chain for 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' encountered an error while calculating the size of the disk chain for 'String'. The error was: 'ErrorCodeString' (ErrorCode). Maximum disk metric will not be updated for the current disk. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12293: There was an error while calculating the size of the disk chain for disk metrics

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12350: 'VmName': An error occurred while attempting to start the virtual machine

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12350: '.

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Message #

'%1': An error occurred while attempting to start the virtual machine. Cannot open '%3'. The state of the virtual machine cannot be changed because one or more storage media are not accessible. Hyper-V does not support the use of storage media if Encrypting File System has been used to encrypt files. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12351: An error occurred while attempting to start the virtual machine

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

An error occurred while attempting to start the virtual machine. Cannot open 'String'.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12352: 'VmName': An error occurred while attaching 'String' to the virtual machine because the file is encrypted

Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12352: '.

Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Message #

'%1': An error occurred while attaching '%3' to the virtual machine because the file is encrypted. Hyper-V does not support the use of storage media if Encrypting File System has been used to encrypt files. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12353: An error occurred while attaching 'String' to the virtual machine because he file is encrypted

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12602: Virtual machine 'VmName' is configured to allow unfiltered SCSI commands for physical disks attached to SCSI controllers

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 12603: The virtual machine is configured to allow unfiltered SCSI commands for physical disks attached to SCSI controllers

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 12620: 'VmName': The attempt to get information for attachment 'String' failed

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The attempt to get information for attachment 'String' failed. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12621: The attempt to get information for attachment 'String' failed

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12622: 'VmName': Enabling change tracking failed for the drive 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Enabling change tracking failed for the drive 'String'. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12623: 'VmName':Failed to configure 'String': Virtual hard disk sharing must be enabled on VHD Set files

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12624: Failed to configure 'String': Virtual hard disk sharing must be enabled on VHD Set files

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12625: 'VmName': Failed to enable virtual hard disk resiliency for the drive 'String' with error 'ErrorCode' ('ErrorCodeString')

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12626: 'VmName': Failed to enable virtual hard disk resiliency for the drive 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12628: 'VmName': Failed to get the recovery status for the drive 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Failed to get the recovery status for the drive 'String'. Virtual hard disk resiliency will be suspended for this drive until next reboot. Error: 'ErrorCode' ('ErrorCodeString').

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12629: 'VmName': Failed to get the recovery status for the drive 'String'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Failed to get the recovery status for the drive 'String'. Virtual hard disk resiliency will be suspended for this drive until next reboot.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12630: 'VmName': Virtual hard disk resiliency failed to recover the drive 'Path'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual hard disk resiliency failed to recover the drive 'Path'. The virtual machine will be powered off. Current status: Status. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Path` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 12631: 'VmName': The shared virtual hard disk drive 'String' was unmounted and will be attempted to be recovered

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': The shared virtual hard disk drive 'String' was unmounted and will be attempted to be recovered. Error: 'ErrorCode' ('ErrorCodeString').

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12632: 'VmName': The shared virtual hard disk drive 'String' that was unmounted previously has now been successfully recovered

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12633: 'VmName': An attempt to recover the shared virtual hard disk drive 'String' has failed

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': An attempt to recover the shared virtual hard disk drive 'String' has failed. Error: 'ErrorCode' ('ErrorCodeString').

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12634: 'VmName': Virtual hard disk resiliency successfully recovered drive 'Path'

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual hard disk resiliency successfully recovered drive 'Path'. Current status: Status. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Path` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 12635: 'VmName': Virtual hard disk 'Path' received a resiliency status notification

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual hard disk 'Path' received a resiliency status notification. Current status: Status. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Path` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 12636: 'VmName': Virtual hard disk 'Path' has detected a recoverable error

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual hard disk 'Path' has detected a recoverable error. Current status: Status. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Path` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 12637: 'VmName': Virtual hard disk 'Path' has not yet recovered from a previous error

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Virtual hard disk 'Path' has not yet recovered from a previous error. Current status: Status. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Path` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 12638: 'VmName': 'String' is an invalid pool id for this resource

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': 'String' is an invalid pool id for this resource. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12639: 'String' is an invalid pool id for this resource

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12640: 'VmName': Unsupported attachment Path 'String' in the drive

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName': Unsupported attachment Path 'String' in the drive. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12641: Unsupported attachment Path 'String' in the drive

Channel: Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UInt32
`Param1` UnicodeString
`Param2` UnicodeString

Provenance

ETW provider GUID edacd782-2564-4497-ade6-7199377850f2

Defined in vmsynthstor.dll, which carries the event manifest.

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB