The Cluster service is shutting down because quorum was lost

Microsoft.Windows.2008.Cluster.Management.Monitoring.The.Cluster.service.is.shutting.down.because.quorum.was.lost (Rule)

Knowledge Base article:

The Cluster service is shutting down because quorum was lost. This can occur when network connectivity is lost between some or all nodes in the cluster, or the witness disk fails over. It can also occur if you make a change in the cluster configuration such as increasing the number of nodes, when the number of nodes currently online is too few to achieve quorum in the new configuration.

Review the event log and choose actions that apply to your situation:

To perform the following procedures, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority.

Using the Validate a Configuration Wizard to review the network configuration

To use the Validate a Configuration Wizard to review the network configuration:

  1. To open the failover cluster snap-in, click Start, click Administrative Tools, and then click Failover Cluster Management. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the Failover Cluster Management snap-in, in the console tree, make sure Failover Cluster Management is selected. Then under Management, click Validate a Configuration.
  3. Follow the instructions in the wizard to specify the cluster you want to test.
  4. On the Testing Options page, select Run only tests I select.
  5. On the Test Selection page, clear all check boxes except those for the Network tests.
  6. Follow the instructions in the wizard to run the tests.
  7. On the Summary page, click View Report.

Finding information about the quorum configuration

To find information about the quorum configuration:

  1. To open the failover cluster snap-in, click Start, click Administrative Tools, and then click Failover Cluster Management. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the Failover Cluster Management snap-in, if the cluster you want to manage is not displayed, in the console tree, right-click Failover Cluster Management, click Manage a Cluster, and then select or specify the cluster that you want.
  3. In the console tree, ensure that the cluster is selected.
  4. In the center pane, near the top, view the Quorum Configuration.
  5. For information that can help you interpret whether the quorum configuration is appropriate for the number of nodes (an even number or an odd number), click Help, click Help Topics, click the Contents tab, expand the contents for the failover cluster Help, expand Modifying Settings for a Failover Cluster, and then click Understanding Quorum Configurations in a Failover Cluster.

    In that topic, "Quorum configuration choices" describes how the choices relate to the number of nodes. To change the quorum configuration in your cluster, in the same section of Help, also see the topic called Select Quorum Options for a Cluster.

Element properties:

TargetMicrosoft.Windows.2008.Cluster.Monitoring.Service
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
The Cluster service is shutting down because quorum was lost
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.2008.Cluster.EventProvider Default
WA WriteAction Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription Default

Source Code:

<Rule ID="Microsoft.Windows.2008.Cluster.Management.Monitoring.The.Cluster.service.is.shutting.down.because.quorum.was.lost" Enabled="onEssentialMonitoring" Target="Clus2008Library!Microsoft.Windows.2008.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.2008.Cluster.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1177</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
<LogName>System</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.2008.Cluster.Management.Monitoring.The.Cluster.service.is.shutting.down.because.quorum.was.lost.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>