Home
  •  

SMB client failed to resume CA handle

Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleFailure (Rule)

SMB client failed to resume a continuous available (CA) handle on a CA file share.

Knowledge Base article:

Summary

The SMB client failed to resume a handle on a file share with continuous availability.

Causes

This error can occur if the volume for the file share does not have the Resume Key filter attached or similar reasons.

Resolutions

: Inspect the event and address the reason or status code for the failure. Applications with continuously available file handles opened on file shares on the affected volumes will have the handles closed. The application administrator will need to take recovery action to reestablish those handles. This could include restarting virtual machines, reattaching databases or restarting the application

Element properties:

TargetMicrosoft.Windows.FileServices.Service.SMB.6.2
CategoryAvailabilityHealth
EnabledTrue
Event_ID30611
Event SourceMicrosoft-Windows-SMBClient
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
SMB client failed to resume CA handle
SMB client failed to resume a continuous available (CA) handle on a CA file share.
Event LogMicrosoft-Windows-SMBClient/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleFailure" Target="Microsoft.Windows.FileServices.Service.SMB.6.2" Remotable="true" Enabled="true">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Microsoft-Windows-SMBClient/Operational</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Microsoft-Windows-SMBClient</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">30611</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleFailure.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>