All Rules in Microsoft.Windows.FileServices.SMB.2012 Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Microsoft.Windows.FileServices.Service.SMB.6.2.CAResumeFailureNoRKFSMB client failed to resume CA handle as Resume Key Filter is not acknowledging the handleSMB client failed to resume Continuously Available (CA) handle as Resume Key Filter is not acknowledging the handle.Microsoft.Windows.FileServices.Service.SMB.6.2.CAResumeFailureNoRKFMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue01002Microsoft-Windows-SMBServerTrueErrorNormalTrueMicrosoft-Windows-SMBServer/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.CCFReopenFailureSMB client failed to reopen a handle after a client failover.SMB client failover to reopen a handle for an application registered with cluster client failover.Microsoft.Windows.FileServices.Service.SMB.6.2.CCFReopenFailureMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue02000Microsoft-Windows-CCFFilterTrueErrorNormalTrueMicrosoft-Windows-CCFFilter/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.HandleOpenFailureSMB client failed to open CA handleSMB client failed to open a continuous available (CA) handle on a CA file share.Microsoft.Windows.FileServices.Service.SMB.6.2.HandleOpenFailureMicrosoft.Windows.FileServices.Service.SMB.6.2AvailabilityHealthTrue030613Microsoft-Windows-SmbClientTrueErrorNormalTrueMicrosoft-Windows-SmbClient/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleFailureSMB client failed to resume CA handleSMB client failed to resume a continuous available (CA) handle on a CA file share.Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleFailureMicrosoft.Windows.FileServices.Service.SMB.6.2AvailabilityHealthTrue030611Microsoft-Windows-SMBClientTrueErrorNormalTrueMicrosoft-Windows-SMBClient/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleOrphanSMB client failed to resume CA handleSMB client failed to resume a continuous available (CA) handle on a CA file share.Microsoft.Windows.FileServices.Service.SMB.6.2.PersistentHandleOrphanMicrosoft.Windows.FileServices.Service.SMB.6.2AvailabilityHealthTrue030614Microsoft-Windows-SMBClientTrueErrorNormalTrueMicrosoft-Windows-SMBClient/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.SetCAFailureNoRKFSMB server failed to set CA property on a file shareSMB server failed to set Continuously Available (CA) property on a file share.Microsoft.Windows.FileServices.Service.SMB.6.2.SetCAFailureNoRKFMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue01801Microsoft-Windows-SMBServerTrueErrorNormalTrueMicrosoft-Windows-SMBServer/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.SetCAFailureNotClusteredSMB server failed to set CA property on a file shareSMB server failed to set Continuously Available (CA) property on a file share.Microsoft.Windows.FileServices.Service.SMB.6.2.SetCAFailureNotClusteredMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue01800Microsoft-Windows-SMBServerTrueErrorNormalTrueMicrosoft-Windows-SMBServer/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessAccessDeniedSMB Witness Service Protocol Security Callback FailureMicrosoft.Windows.FileServices.Service.SMB.6.2.WitnessAccessDeniedMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue02Microsoft-Windows-SMBWitnessServiceTrueErrorNormalTrueWitnessServiceAdmin
Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessClientServerFailedSMB Witness client received error from a SMB Witness serverSMB Witness client received an error from a SMB Witness server.Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessClientServerFailedMicrosoft.Windows.FileServices.Service.SMB.6.2AvailabilityHealthTrue09Microsoft-Windows-SMBWitnessClientTrueErrorNormalTrueWitnessClientAdmin
Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessClientServerSelectionFailedSMB Witness client failed to select a SMB Witness serverSMB Witness client failed to select a SMB Witness server.Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessClientServerSelectionFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue06Microsoft-Windows-SMBWitnessClientTrueErrorNormalTrueWitnessClientAdmin
Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessInitFailureSMB Witness Service Initialization FailedMicrosoft.Windows.FileServices.Service.SMB.6.2.WitnessInitFailureMicrosoft.Windows.FileServices.Service.SMB.6.2.ClusteredAvailabilityHealthTrue01Microsoft-Windows-SMBWitnessServiceTrueErrorNormalTrueWitnessServiceAdmin
Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessMoveFailureSMB client move request failedSMB client failed to move connection to the specified cluster node.Microsoft.Windows.FileServices.Service.SMB.6.2.WitnessMoveFailureMicrosoft.Windows.FileServices.Service.SMB.6.2AvailabilityHealthTrue030628Microsoft-Windows-SMBClientTrueErrorNormalTrueMicrosoft-Windows-SMBClient/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01017Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01016Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01015Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01013Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01012Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01011Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01008Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01007Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01006Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.2.FssAgentEnabledAvailabilityHealthTrue01005Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational