Cluster node cleanup error

Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.cleanup.error (Rule)

Knowledge Base article:

An operation that was part of destroying the cluster did not succeed. Try restarting the server to see if this resolves the error. If not, use commands to force cleanup on former cluster nodes, and to force the clearing of persistent reservations on disks formerly used by the cluster. These commands help ensure that the cluster configuration has been completely removed.

If you do not currently have Event Viewer open, see "Opening Event Viewer and viewing events related to failover clustering." If the event contains an error code that you have not yet looked up, see "Finding more information about error codes that some event messages contain."

To perform the following procedures, you must be a member of the local Administrators group on the server, or you must have been delegated the equivalent authority.

Forcing cleanup on a former cluster node after the cluster has been destroyed

To force cleanup on a former cluster node after the cluster has been destroyed:

  1. On the former cluster node that you want to clean up, open an elevated Command Prompt window. To do this, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type:

    CLUSTER NODE /FORCECLEANUP

Forcing the clearing of persistent reservations on a disk formerly used by the cluster

To force the clearing of persistent reservations on a disk formerly used by the cluster:

  1. On one or more nodes in the cluster, open Disk Management (which is in Server Manager under Storage) and see if any disks formerly used by the cluster are visible from one of the nodes. If they are, note the node and the number that Disk Management uses to refer to that disk. For example, if the disk is listed as Disk 4 in Disk Management, note the number 4.
  2. On a node from which a formerly-clustered disk is visible in Disk Management, open an elevated Command Prompt window. To do this, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  3. Type:

    CLUSTER NODE /CLEARPR:disknumber

    where disknumber is the number of the disk as it appeared in Disk Management.

Opening Event Viewer and viewing events related to failover clustering

To open Event Viewer and view events related to failover clustering:

  1. If Server Manager is not already open, click Start, click Administrative Tools, and then click Server Manager. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the console tree, expand Diagnostics, expand Event Viewer, expand Windows Logs, and then click System.
  3. To filter the events so that only events with a Source of FailoverClustering are shown, in the Actions pane, click Filter Current Log. On the Filter tab, in the Event sources box, select FailoverClustering. Select other options as appropriate, and then click OK.
  4. To sort the displayed events by date and time, in the center pane, click the Date and Time column heading.

Finding more information about the error codes that some event messages contain

To find more information about the error codes that some event messages contain:

  1. View the event, and note the error code.
  2. Look up more information about the error code in one of two ways:

Element properties:

TargetMicrosoft.Windows.2008.Cluster.Monitoring.Service
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Cluster node cleanup error
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.2008.Cluster.EventProvider Default
WA WriteAction Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription Default

Source Code:

<Rule ID="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.cleanup.error" Enabled="onEssentialMonitoring" Target="Clus2008Library!Microsoft.Windows.2008.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.2008.Cluster.EventProvider">
<Criteria>
<RegExExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(4624|4622|4620|4618|4615|4613|4611|4609)$</Pattern>
</RegExExpression>
</Criteria>
<LogName>System</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.node.cleanup.error.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>