Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailed (Rule)

Knowledge Base article:

Summary

FileServerVssAgent failed to get the owner machine name of the share specified

Causes

FileServerVssAgent must resolve the owner machine name of the share specified to direct its client to start shadow copy creation on the server that owns the metadata of the volume backing the share in the failover cluster or scale-out cluster.

Resolutions

Check the Cluster event log and make sure the file server or scale out file server resource group that exposes the share is online and healthy.

Element properties:

TargetMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabled
CategoryAvailabilityHealth
EnabledTrue
Event_ID1015
Event SourceMicrosoft-Windows-FileShareShadowCopyAgent
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
FileServerVssAgent failed to get owner machine name for share specified
FileServerVssAgent failed to get owner machine name for share specified.
Event LogMicrosoft-Windows-FileShareShadowCopyAgent/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailed" Target="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabled" Remotable="true" Enabled="true">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Microsoft-Windows-FileShareShadowCopyAgent/Operational</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-FileShareShadowCopyAgent</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1015</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailed.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>