[Nano Server] Cluster Shared Volume - NTFS State Monitor

Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Monitoring.NTFS.NanoServer (UnitMonitor)

This monitor checks the state of the file system on the targeted cluster shared volume.

Knowledge Base article:

Summary

NTFS has reported that the Cluster Shared Volume is either corrupted or completely unavailable. Some data stored on the volume may be inaccessible.

Configuration

A logical disk may become corrupted or inaccessible due to a number of reasons some of which include:

A physical disk related to the Cluster Shared Volume has been removed or failed
A physical disk related to the Cluster Shared Volume has become corrupt (for example; bad sectors) or inoperable

Resolutions

Check the status of your hardware for any failures (for example, a disk, controller, cabling failure). In most cases, the system log contains additional events from the lower-level storage drivers that indicate the cause of the failure.

After you have isolated and resolved the hardware problem:

Open the Disk Management snap-in.
Rescan the disks and then reactivate any disks with errors.
Run chkdsk on any reactivated volumes.

Element properties:

Target

Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.NewOS

Parent Monitor

System.Health.AvailabilityState

Category

AvailabilityHealth

Enabled

False

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Monitoring.NTFS.Monitortype.NanoServer

Remotable

True

Accessibility

Public

Alert Message

Cluster Shared Volume Filesystem Corrupt

{0}: The file system is corrupt on the cluster shared volume {1} mounted on {2} failed. NTFS dirty bit = {4}. (Partition: {3}).

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Monitoring.NTFS.NanoServer" Accessibility="Public" Enabled="false" Target="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.NewOS" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Monitoring.NTFS.Monitortype.NanoServer" ConfirmDelivery="false">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Monitoring.NTFS.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</AlertParameter1>

      <AlertParameter2>$Target/Property[Type="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Base"]/ClusterSharedVolumeName$</AlertParameter2>

      <AlertParameter3>$Target/Property[Type="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Base"]/FriendlyVolumeName$</AlertParameter3>

      <AlertParameter4>$Target/Property[Type="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Base"]/PartitionName$</AlertParameter4>

      <AlertParameter5>$Data/Context/Property[@Name='NTFSIsDirty']$</AlertParameter5>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="MonitorOk" MonitorTypeStateID="MonitorOk" HealthState="Success"/>

    <OperationalState ID="MonitorError" MonitorTypeStateID="MonitorError" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <IntervalSeconds>900</IntervalSeconds>

    <SyncTime/>

    <LogSuccessEvent>false</LogSuccessEvent>

    <ScriptGroupId>ClusterSharedVolumeMonitoring</ScriptGroupId>

    <TargetComputer>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</TargetComputer>

    <ClusterName>$Target/Property[Type="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Base"]/ClusterName$</ClusterName>

    <TimeoutSeconds>300</TimeoutSeconds>

    <ClusterSharedVolumeName>$Target/Property[Type="Microsoft.Windows.Server.ClusterSharedVolumeMonitoring.ClusterSharedVolume.Base"]/ClusterSharedVolumeName$</ClusterSharedVolumeName>

    <BADPattern>1</BADPattern>

  </Configuration>

</UnitMonitor>