偵測到 SMB 繼續金鑰篩選 ChkDsk

Microsoft.Windows.FileServices.Service.SMB.6.3.ResumeKeyFilterChkDskDetected (UnitMonitor)

監視「繼續金鑰篩選」資料庫載入狀態

Knowledge Base article:

摘要

繼續金鑰偵測到已在一或多個磁碟區上執行 CHKDSK,且已針對這些磁碟區捨棄其資料庫。

原因

如果系統管理員已在具有持續可用檔案共用的磁碟區上執行 CHKDSK,或已自動完整執行 CHKDSK,繼續金鑰將無法安全地繼續執行已開啟的檔案控點。

解決方式

若應用程式有持續可用控點在受影響磁碟區上的檔案共用中開啟,則會關閉這些控點。一旦問題獲得解決之後,應用程式管理員將必須採取復原動作來重新建立這些控點。這些動作可能包括重新啟動虛擬機器、重新連結資料庫或重新啟動應用程式

Element properties:

TargetMicrosoft.Windows.FileServices.Service.SMB.6.3.Clustered
Parent MonitorMicrosoft.Windows.FileServices.Service.SMB.6.3.ContinuousAvailability
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
繼續金鑰偵測到 CHKDSK
繼續金鑰在一或多個磁碟區上偵測到 CHKDSK,並將針對這些磁碟區捨棄其資料庫。
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServices.Service.SMB.6.3.ResumeKeyFilterChkDskDetected" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" Accessibility="Public" Target="Microsoft.Windows.FileServices.Service.SMB.6.3.Clustered" ParentMonitorID="Microsoft.Windows.FileServices.Service.SMB.6.3.ContinuousAvailability" Remotable="true">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.FileServices.Service.SMB.6.3.ResumeKeyFilterChkDskDetected.AlertMessage">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="ResumeKeyFilterChkDskDetectedFailed" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>
<OperationalState ID="ResumeKeyFilterChkDskDetectedOK" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Microsoft-Windows-ResumeKeyFilter/Operational</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-ResumeKeyFilter</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1010</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Microsoft-Windows-ResumeKeyFilter/Operational</SecondLogName>
<SecondExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-ResumeKeyFilter</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1002</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</SecondExpression>
</Configuration>
</UnitMonitor>