| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Attempt to disable connection security failed | Microsoft.Windows.10.0.Cluster.Attempt.to.disable.connection.security.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register dynamic updates for DNS name | Microsoft.Windows.10.0.Cluster.Cluster.network.name.resource.failed.to.register.dynamic.updates | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register in a secure DNS zone because record was already registered and owned | Microsoft.Windows.10.0.Cluster.Cluster.network.name.resource.failed.to.register.in.secure.DNS.zone.because.record.was.already.registered.and.owned | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register in a secure DNS zone because registration was refused | Microsoft.Windows.10.0.Cluster.Cluster.network.name.resource.failed.to.register.in.secure.DNS.zone.because.registration.was.refused | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to update the DNS A record | Microsoft.Windows.10.0.Cluster.Cluster.network.name.resource.failed.to.update.DNS.A.record | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to create a cluster identity token for Cluster Shared Volumes | Microsoft.Windows.10.0.Cluster.Cluster.Service.failed.to.create.a.cluster.identity.token.for.Cluster.Shared.Volumes | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to create root directory to host shared volumes | Microsoft.Windows.10.0.Cluster.Cluster.Service.failed.to.create.root.directory.to.host.shared.volumes | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to set permissions on Cluster Shared Volume directory | Microsoft.Windows.10.0.Cluster.Cluster.Service.failed.to.set.permissions.on.Cluster.Shared.Volume.directory | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service failed to move cluster hive | Microsoft.Windows.10.0.Cluster.Cluster.Service.failed.tomove.cluster.hive | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Service moved previously existing files in newly-created shared volume directory to new location | Microsoft.Windows.10.0.Cluster.Cluster.Service.moved.previously.existing.files.in.newly.created.shared.volume.directory.to.new.location | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Shared Volume is no longer accessible from cluster node | Microsoft.Windows.10.0.Cluster.Cluster.Shared.Volume.is.no.longer.accessible.from.cluster.node | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Shared Volume redirected access was turned on | Microsoft.Windows.10.0.Cluster.Cluster.Shared.Volume.redirected.access.was.turned.on | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Communication was lost and reestablished between cluster nodes | Microsoft.Windows.10.0.Cluster.Communication.was.lost.and.reestablished.between.cluster.nodes | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Error occurred while bringing file server resource online | Microsoft.Windows.10.0.Cluster.Error.occurred.while.bringing.file.server.resource.online | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Filter driver(s) are preventing direct I/O on Cluster Shared Volume | Microsoft.Windows.10.0.Cluster.Filter.drivers.are.preventing.direct.IO.on.Cluster.Shared.Volume | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Health check for file server resource has failed | Microsoft.Windows.10.0.Cluster.Health.check.for.file.server.resource.has.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Attempting to use IPv4 for network adapter failed due to a failure to disable auto-configuration and DHCP | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Attempting.to.use.IPv4.for.network.adapter.failed.due.to.a.failure.to.disable.autoconfiguration.and.DHCP | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster backup aborted | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.backup.aborted | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster configuration information is missing or corrupt | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.configuration.information.is.missing.or.corrupt | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster disk resource found the disk identifier to be stale | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.disk.resource.found.the.disk.identifier.to.be.stale | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster File Share cannot be brought online due to a share creation error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.File.Share.cannot.be.brought.online.due.to.a.share.creation.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster file share resource has detected shared folder conflicts | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.file.share.resource.has.detected.shared.folder.conflicts | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource cannot be brought online because of a duplicate IP address | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.of.a.duplicate.IP.address | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource cannot be brought online because the address value is invalid | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.address.value.is.invalid | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource cannot be brought online because the cluster network is not configured to allow client access | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.cluster.network.is.not.configured.to.allow.client.access | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource cannot be brought online because the subnet mask value is invalid | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.the.subnet.mask.value.is.invalid | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource cannot be brought online because WINS registration failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.cannot.be.brought.online.because.WINS.registration.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource encountered an error with a leased address | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.encountered.an.error.with.a.leased.address | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource failed to come online | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.failed.to.come.online | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster IP address resource failed to come online due to a configuration problem | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.IP.address.resource.failed.to.come.online.due.to.a.configuration.problem | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network interface for cluster node failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.interface.for.cluster.node.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | False | True |
| Cluster network interface is unreachable by at least one other cluster node attached to the network | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.interface.is.unreachable.by.at.least.one.other.cluster.node.attached.to.the.network | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network is down | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.is.down | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network is partitioned | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.is.partitioned | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource cannot be brought online due to a timeout | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.name.resource.cannot.be.brought.online.due.to.a.timeout | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed a health check | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.a.health.check | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to create its associated computer object | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.create.its.associated.computer.object | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to delete its associated computer object | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.delete.its.associated.computer.object | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource failed to register DNS name | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.network.name.resource.failed.to.register.DNS.name | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster node cleanup error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.node.cleanup.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster node cleanup warning | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.node.cleanup.warning | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster node has been evicted from the failover cluster | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.node.has.been.evicted.from.the.failover.cluster | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster node network connectivity problem detected | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.node.network.connectivity.problem.detected | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster physical disk resource cannot be brought online because the associated disk could not be found | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.physical.disk.resource.cannot.be.brought.online.because.the.associated.disk.could.not.be.found | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster resource failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.resource.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service account is missing one or more from the required set of privileges | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service cannot identify a node as a member of failover cluster | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.cannot.identify.a.node.as.a.member.of.failover.cluster | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service could not write to a file | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.could.not.write.to.a.file | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service failed to change the trace log size | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service failed to start the cluster log trace session | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.failed.to.start.the.cluster.log.trace.session | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| cluster service has determined that this node does not have the latest copy of cluster configuration data | Microsoft.Windows.10.0.Cluster.Management.Monitoring.cluster.service.has.determined.that.this.node.does.not.have.the.latest.copy.of.cluster.configuration.data | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster service suffered an unexpected fatal error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Cluster.service.suffered.an.unexpected.fatal.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Computer object associated with a network name resource could not be updated | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Computer.object.associated.with.a.network.name.resource.could.not.be.updated | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Disabled network is the only possible network that the node can communicate with other nodes | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Disabled.network.is.the.only.possible.network.that.the.node.can.communicate.with.other.nodes | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Disabling version compatibility checking is not supported | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Disabling.version.compatibility.checking.is.not.supported | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Encountered a failure when attempting to create a new NetBIOS interface while bringing a resource online | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Encountered.a.failure.when.attempting.to.create.a.new.NetBIOS.interface.while.bringing.a.resource.online | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Encrypted settings for cluster resource could not be successfully applied | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Encrypted.settings.for.cluster.resource.could.not.be.successfully.applied | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Failed to add required credentials to the LSA | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Failed.to.add.required.credentials.to.the.LSA | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Failed to join or form a cluster | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Failed.to.join.or.form.a.cluster | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Generic application could not be brought online due to a service startup error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.a.service.startup.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Generic application could not be brought online due to process creation error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.process.creation.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Generic script resource error | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.script.resource.error | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Generic service could not be brought online due to an error attempting to open the service | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.service.could.not.be.brought.online.due.to.an.error.attempting.to.open.the.service | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Generic service failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.service.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Health check for file share resource failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Health.check.for.file.share.resource.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Health check for file share resource failed as the share does not exist | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Health.check.for.file.share.resource.failed.as.the.share.does.not.exist | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Health check for IP interface failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Health.check.for.IP.interface.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| IPv6 tunnel address resource failed to come online | Microsoft.Windows.10.0.Cluster.Management.Monitoring.IPv6.tunnel.address.resource.failed.to.come.online | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| IPv6 Tunnel address resource failed to come online because it does not depend on an IP Address (IPv4) resource | Microsoft.Windows.10.0.Cluster.Management.Monitoring.IPv6.Tunnel.address.resource.failed.to.come.online.because.it.does.not.depend.on.an.IP.Address.IPv4.resource | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Lease of IP address associated with cluster IP address resource cannot be renewed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Lease.of.IP.address.associated.with.cluster.IP.address.resource.cannot.be.renewed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Failed to set Network Name permissions | Microsoft.Windows.10.0.Cluster.Management.Monitoring.network.name.resource.failed.to.set.permissions | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| No matching network interface found for IP address | Microsoft.Windows.10.0.Cluster.Management.Monitoring.No.matching.network.interface.found.for.IP.address | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| One or more cluster disk volumes may be corrupt | Microsoft.Windows.10.0.Cluster.Management.Monitoring.One.or.more.cluster.disk.volumes.may.be.corrupt | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Ownership of cluster disk has been unexpectedly lost | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Ownership.of.cluster.disk.has.been.unexpectedly.lost | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Potentially incompatible versions of cluster service | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Potentially.incompatible.versions.of.cluster.service | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The backup operation for the cluster configuration data has been canceled due to an abort request | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.backup.operation.for.the.cluster.configuration.data.has.been.canceled.due.to.an.abort.request | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The cluster service encountered an unexpected problem and will be shut down | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.cluster.service.encountered.an.unexpected.problem.and.will.be.shut.down | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The cluster service failed to start due a miniport adapter initialization failure | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.cluster.service.failed.to.start.due.a.miniport.adapter.initialization.failure | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The Cluster service is shutting down because quorum was lost | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.Cluster.service.is.shutting.down.because.quorum.was.lost | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The failover cluster database could not be unloaded | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.failover.cluster.database.could.not.be.unloaded | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The failover cluster virtual adapter failed to generate a unique MAC address | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.failover.cluster.virtual.adapter.failed.to.generate.a.unique.MAC.address | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The restore operation for the cluster configuration data has failed due to insufficient privileges | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.restore.operation.for.the.cluster.configuration.data.has.failed.due.to.insufficient.privileges | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| The restore operation of the cluster configuration data has failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.The.restore.operation.of.the.cluster.configuration.data.has.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Unable to access witness resource | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Unable.to.access.witness.resource | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| User mode health monitoring has detected that the system is not being responsive | Microsoft.Windows.10.0.Cluster.Management.Monitoring.User.mode.health.monitoring.has.detected.that.the.system.is.not.being.responsive | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Volume shadow copy service task resource failed | Microsoft.Windows.10.0.Cluster.Management.Monitoring.Volume.shadow.copy.service.task.resource.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Original cluster disk drive letter(s) are already in use and cannot be restored | Microsoft.Windows.10.0.Cluster.Original.cluster.disk.drive.letters.are.already.in.use.and.cannot.be.restored | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Physical disk resource does not allow disabling short name generation | Microsoft.Windows.10.0.Cluster.Physical.disk.resource.does.not.allow.disabling.short.name.generation | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster Role has exceeded its failover threshold | Microsoft.Windows.10.0.Cluster.RCM.Group.Terminal.Failure | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster resource received a critical state notification | Microsoft.Windows.10.0.Cluster.RCM.Resource.Embedded.Failure | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Resource has registered DNS entries that are not providers | Microsoft.Windows.10.0.Cluster.Resource.has.registered.DNS.entries.that.are.not.providers | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Distributed network name resource failed on this node | Microsoft.Windows.10.0.Cluster.Resource.Netname.Clone.failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Cluster network name resource error logging on to the domain | Microsoft.Windows.10.0.Cluster.Resource.Netname.Logon.Failed | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Shared Volume IO is paused | Microsoft.Windows.10.0.Cluster.Shared.Volume.IO.is.paused | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Shared Volume IO is resumed in no-direct-io mode | Microsoft.Windows.10.0.Cluster.Shared.Volume.IO.is.resumed.in.no.direct.io.mode | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |
| Volume flush-and-hold IOCTL was detected on clustered shared volume | Microsoft.Windows.10.0.Cluster.Volume.flush.and.hold.IOCTL.was.detected.on.clustered.shared.volume | Microsoft.Windows.10.0.Cluster.Monitoring.Service | Alert | True | True |