クラスタ サービスは、トレース ログ サイズを変更できません

Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size (Rule)

Knowledge Base article:

The Cluster service either failed to start the cluster log trace session, or failed to change the trace log size. If you do not currently have Event Viewer open, to view the event message, see "Opening Event Viewer and viewing events related to failover clustering." If the event contains an error code that you have not yet looked up, see "Finding more information about error codes that some event messages contain."

To capture detailed logs of events on a node in a failover cluster, see "Using Reliability and Performance Monitor to ensure that Event Trace Sessions are started on a node in a failover cluster." To check the current setting for the cluster log size, see "Using a command to check the setting for the cluster log size."

To perform the following procedures, you must be a member of the local Administrators group on the node in the failover cluster, or you must have been delegated the equivalent authority.

Opening Event Viewer and viewing events related to failover clustering

To open Event Viewer and view events related to failover clustering:

  1. If Server Manager is not already open, click Start, click Administrative Tools, and then click Server Manager. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the console tree, expand Diagnostics, expand Event Viewer, expand Windows Logs, and then click System.
  3. To filter the events so that only events with a Source of FailoverClustering are shown, in the Actions pane, click Filter Current Log. On the Filter tab, in the Event sources box, select FailoverClustering. Select other options as appropriate, and then click OK.
  4. To sort the displayed events by date and time, in the center pane, click the Date and Time column heading.

Finding more information about the error codes that some event messages contain

To find more information about the error codes that some event messages contain:

  1. View the event, and note the error code.
  2. Look up more information about the error code in one of two ways:

Using Reliability and Performance Monitor to ensure that Event Trace Sessions are started on a node in a failover cluster

To use Reliability and Performance Monitor to ensure that Event Trace Sessions are started on a node in a failover cluster:

  1. To open Reliability and Performance Monitor, click Start, click Administrative Tools, and then click Reliability and Performance Monitor. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the console tree, expand Data Collector Sets and then click Event Trace Sessions.
  3. In the list of event trace sessions, find the status for FailoverClustering. If it is not Running, right-click it and then click Start.

Using a command to check the setting for the cluster log size

To use a command to check the setting for the cluster log size:

  1. On the node that you are checking, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type:

    CLUSTER /PROP:CLUSTERLOGSIZE

Element properties:

TargetMicrosoft.Windows.2008.Cluster.Monitoring.Service
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
クラスタ サービスは、トレース ログ サイズを変更できません
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.2008.Cluster.EventProvider Default
WA WriteAction Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription Default

Source Code:

<Rule ID="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size" Enabled="onEssentialMonitoring" Target="Clus2008Library!Microsoft.Windows.2008.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.2008.Cluster.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1567</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
<LogName>Microsoft-Windows-FailoverClustering/Operational</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.failed.to.change.the.trace.log.size.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>