Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailed (Rule)

Knowledge Base article:

Riepilogo

FileServerVssAgent non è riuscito a esporre la condivisione copia shadow tramite le copie shadow del volume file server.

Cause

FileServerVssAgent espone la condivisione copia shadow dopo la ricezione del percorso copia shadow del volume locale durante PostSnapshot. Eventuali errori verificatisi durante l'aggiunta di condivisioni sul percorso shadow del volume locale saranno registrati nel registro eventi.

Soluzioni

Controllare che la copia shadow del volume locale sia disponibile. Controllare il registro eventi LanmanServer per individuare l'errore durante l'aggiunta di condivisioni.

Element properties:

TargetMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabled
CategoryAvailabilityHealth
EnabledTrue
Event_ID1016
Event SourceMicrosoft-Windows-FileShareShadowCopyAgent
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
FileServerVssAgent: impossibile creare condivisione copia shadow
FileServerVssAgent non è riuscito a creare la condivisione copia shadow.
Event LogMicrosoft-Windows-FileShareShadowCopyAgent/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailed" Target="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabled" Remotable="true" Enabled="true">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Microsoft-Windows-FileShareShadowCopyAgent/Operational</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-FileShareShadowCopyAgent</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1016</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailed.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>