| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| 尝试使用网络适配器的 IPv4 的操作由于无法禁用自动配置和 DHCP 而失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Attempting.to.use.IPv4.for.network.adapter.failed.due.to.a.failure.to.disable.autoconfiguration.and.DHCP | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| Cluster backup aborted | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.backup.aborted | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集配置信息丢失或损坏 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.configuration.information.is.missing.or.corrupt | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集磁盘资源发现陈旧的磁盘标识符 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.disk.resource.found.the.disk.identifier.to.be.stale | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集文件共享由于共享创建错误而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.File.Share.cannot.be.brought.online.due.to.a.share.creation.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集文件共享资源检测到共享文件夹冲突 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.file.share.resource.has.detected.shared.folder.conflicts | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于 IP 地址重复而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.of.a.duplicate.IP.address | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于地址值无效而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.address.value.is.invalid | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于群集网络未配置为允许客户端访问而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.cluster.network.is.not.configured.to.allow.client.access | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于子网掩码值无效而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.subnet.mask.value.is.invalid | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于 WINS 注册失败而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.WINS.registration.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源遇到租赁地址错误 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.encountered.an.error.with.a.leased.address | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源联机失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.failed.to.come.online | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集 IP 地址资源由于配置问题而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.IP.address.resource.failed.to.come.online.due.to.a.configuration.problem | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集节点的群集网络接口失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.interface.for.cluster.node.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | False | True |
| 至少一个连接至网络的群集节点无法访问群集网络接口 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.interface.is.unreachable.by.at.least.one.other.cluster.node.attached.to.the.network | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络已关闭 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.is.down | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络已分区 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.is.partitioned | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源由于超时而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.name.resource.cannot.be.brought.online.due.to.a.timeout | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源运行状况检查失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.a.health.check | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源创建其关联计算机对象失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.create.its.associated.computer.object | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源删除其关联计算机对象失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.delete.its.associated.computer.object | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源注册 DNS 名称失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.register.DNS.name | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集节点清理错误 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.cleanup.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集节点清理警告 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.cleanup.warning | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集节点已从故障转移群集中退出 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.has.been.evicted.from.the.failover.cluster | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 检测到群集节点网络连接问题 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.network.connectivity.problem.detected | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集物理磁盘资源由于相关联的磁盘找不到而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.physical.disk.resource.cannot.be.brought.online.because.the.associated.disk.could.not.be.found | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集资源失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.resource.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务帐户缺少一个或多个必需的特权集 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务无法将节点标识为故障转移群集成员 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.cannot.identify.a.node.as.a.member.of.failover.cluster | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务无法写入文件 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.could.not.write.to.a.file | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务更改跟踪日志大小失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务启动群集日志跟踪会话失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.failed.to.start.the.cluster.log.trace.session | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| cluster service has determined that this node does not have the latest copy of cluster configuration data | Microsoft.Windows.2008.Cluster.Management.Monitoring.cluster.service.has.determined.that.this.node.does.not.have.the.latest.copy.of.cluster.configuration.data | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务遇到异常的严重错误 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.suffered.an.unexpected.fatal.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 与网络名称资源相关联的计算机对象无法更新 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Computer.object.associated.with.a.network.name.resource.could.not.be.updated | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 禁用的网络是节点与其他节点通信的唯一可用网络 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Disabled.network.is.the.only.possible.network.that.the.node.can.communicate.with.other.nodes | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 不支持禁用版本兼容性检查 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Disabling.version.compatibility.checking.is.not.supported | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 在资源联机过程中尝试创建新的 NetBIOS 接口时遇到失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Encountered.a.failure.when.attempting.to.create.a.new.NetBIOS.interface.while.bringing.a.resource.online | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集资源的加密设置无法正确应用 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Encrypted.settings.for.cluster.resource.could.not.be.successfully.applied | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 将必需的凭据添加到 LSA 失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Failed.to.add.required.credentials.to.the.LSA | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 加入或形成群集失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Failed.to.join.or.form.a.cluster | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 通用应用程序由于服务启动错误而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.a.service.startup.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 通用应用程序由于过程创建错误而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.process.creation.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 通用脚本资源错误 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Generic.script.resource.error | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 通用服务由于尝试打开服务错误而无法联机 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Generic.service.could.not.be.brought.online.due.to.an.error.attempting.to.open.the.service | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 通用服务失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Generic.service.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 文件共享资源运行状况检查失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Health.check.for.file.share.resource.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 由于共享不存在导致文件共享资源的运行状况检查失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Health.check.for.file.share.resource.failed.as.the.share.does.not.exist | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| IP 接口的运行状况检查失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Health.check.for.IP.interface.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| IPv6 隧道地址资源联机失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.IPv6.tunnel.address.resource.failed.to.come.online | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| IPv6 隧道地址资源由于不依赖 IP 地址 (IPv4) 资源而联机失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.IPv6.Tunnel.address.resource.failed.to.come.online.because.it.does.not.depend.on.an.IP.Address.IPv4.resource | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 与群集 IP 地址资源相关联的 IP 地址租赁无法续订 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Lease.of.IP.address.associated.with.cluster.IP.address.resource.cannot.be.renewed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 找不到与 IP 地址匹配的网络接口 | Microsoft.Windows.2008.Cluster.Management.Monitoring.No.matching.network.interface.found.for.IP.address | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 一个或多个群集磁盘卷可能损坏 | Microsoft.Windows.2008.Cluster.Management.Monitoring.One.or.more.cluster.disk.volumes.may.be.corrupt | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集磁盘的所有权意外丢失 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Ownership.of.cluster.disk.has.been.unexpectedly.lost | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务的版本可能不兼容 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Potentially.incompatible.versions.of.cluster.service | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集配置数据的备份操作由于中止请求而被取消 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.backup.operation.for.the.cluster.configuration.data.has.been.canceled.due.to.an.abort.request | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务遇到意外问题,将要关闭 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.cluster.service.encountered.an.unexpected.problem.and.will.be.shut.down | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务由于微型端口适配器初始化失败而无法启动 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.cluster.service.failed.to.start.due.a.miniport.adapter.initialization.failure | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务由于仲裁丢失而正在关闭 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.Cluster.service.is.shutting.down.because.quorum.was.lost | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 故障转移群集数据库无法卸载 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.failover.cluster.database.could.not.be.unloaded | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 故障转移群集虚拟适配器无法生成唯一的 MAC 地址 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.failover.cluster.virtual.adapter.failed.to.generate.a.unique.MAC.address | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集配置数据的还原操作由于特权不足而失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.restore.operation.for.the.cluster.configuration.data.has.failed.due.to.insufficient.privileges | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 群集配置数据的还原操作已失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.The.restore.operation.of.the.cluster.configuration.data.has.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 无法访问见证资源 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Unable.to.access.witness.resource | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 用户模式运行状况监视已检测到系统未响应 | Microsoft.Windows.2008.Cluster.Management.Monitoring.User.mode.health.monitoring.has.detected.that.the.system.is.not.being.responsive | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| 卷影复制服务任务资源失败 | Microsoft.Windows.2008.Cluster.Management.Monitoring.Volume.shadow.copy.service.task.resource.failed | Microsoft.Windows.2008.Cluster.Monitoring.Service | Alert | True | True |
| Attempt to disable connection security failed | Microsoft.Windows.2008.R2.Cluster.Attempt.to.disable.connection.security.failed | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register dynamic updates for DNS name | Microsoft.Windows.2008.R2.Cluster.Cluster.network.name.resource.failed.to.register.dynamic.updates | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register in a secure DNS zone because record was already registered and owned | Microsoft.Windows.2008.R2.Cluster.Cluster.network.name.resource.failed.to.register.in.secure.DNS.zone.because.record.was.already.registered.and.owned | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register in a secure DNS zone because registration was refused | Microsoft.Windows.2008.R2.Cluster.Cluster.network.name.resource.failed.to.register.in.secure.DNS.zone.because.registration.was.refused | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to update the DNS A record | Microsoft.Windows.2008.R2.Cluster.Cluster.network.name.resource.failed.to.update.DNS.A.record | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to create a cluster identity token for Cluster Shared Volumes | Microsoft.Windows.2008.R2.Cluster.Cluster.Service.failed.to.create.a.cluster.identity.token.for.Cluster.Shared.Volumes | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to create root directory to host shared volumes | Microsoft.Windows.2008.R2.Cluster.Cluster.Service.failed.to.create.root.directory.to.host.shared.volumes | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to set permissions on Cluster Shared Volume directory | Microsoft.Windows.2008.R2.Cluster.Cluster.Service.failed.to.set.permissions.on.Cluster.Shared.Volume.directory | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to move cluster hive | Microsoft.Windows.2008.R2.Cluster.Cluster.Service.failed.tomove.cluster.hive | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service moved previously existing files in newly-created shared volume directory to new location | Microsoft.Windows.2008.R2.Cluster.Cluster.Service.moved.previously.existing.files.in.newly.created.shared.volume.directory.to.new.location | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Shared Volume is no longer accessible from cluster node | Microsoft.Windows.2008.R2.Cluster.Cluster.Shared.Volume.is.no.longer.accessible.from.cluster.node | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Shared Volume redirected access was turned on | Microsoft.Windows.2008.R2.Cluster.Cluster.Shared.Volume.redirected.access.was.turned.on | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Communication was lost and reestablished between cluster nodes | Microsoft.Windows.2008.R2.Cluster.Communication.was.lost.and.reestablished.between.cluster.nodes | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Error occurred while bringing file server resource online | Microsoft.Windows.2008.R2.Cluster.Error.occurred.while.bringing.file.server.resource.online | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Filter driver(s) are preventing direct I/O on Cluster Shared Volume | Microsoft.Windows.2008.R2.Cluster.Filter.drivers.are.preventing.direct.IO.on.Cluster.Shared.Volume | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Health check for file server resource has failed | Microsoft.Windows.2008.R2.Cluster.Health.check.for.file.server.resource.has.failed | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| 群集网络名称资源由于超时而无法联机 | Microsoft.Windows.2008.R2.Cluster.Management.Monitoring.Cluster.network.name.resource.cannot.be.brought.online.due.to.a.timeout | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| 群集服务更改跟踪日志大小失败 | Microsoft.Windows.2008.R2.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Original cluster disk drive letter(s) are already in use and cannot be restored | Microsoft.Windows.2008.R2.Cluster.Original.cluster.disk.drive.letters.are.already.in.use.and.cannot.be.restored | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Physical disk resource does not allow disabling short name generation | Microsoft.Windows.2008.R2.Cluster.Physical.disk.resource.does.not.allow.disabling.short.name.generation | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Resource has registered DNS entries that are not providers | Microsoft.Windows.2008.R2.Cluster.Resource.has.registered.DNS.entries.that.are.not.providers | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Shared Volume IO is paused | Microsoft.Windows.2008.R2.Cluster.Shared.Volume.IO.is.paused | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Shared Volume IO is resumed in no-direct-io mode | Microsoft.Windows.2008.R2.Cluster.Shared.Volume.IO.is.resumed.in.no.direct.io.mode | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |
| Volume flush-and-hold IOCTL was detected on clustered shared volume | Microsoft.Windows.2008.R2.Cluster.Volume.flush.and.hold.IOCTL.was.detected.on.clustered.shared.volume | Microsoft.Windows.2008.R2.Cluster.Monitoring.Service | Alert | True | True |