All Rules in Microsoft.Windows.FileServices.SMB.2012R2 Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Microsoft.Windows.FileServices.Service.SMB.6.3.SetCAFailureNoRKFSMB server failed to set CA property on a file shareSMB server failed to set Continuously Available (CA) property on a file share.Microsoft.Windows.FileServices.Service.SMB.6.3.SetCAFailureNoRKFMicrosoft.Windows.FileServices.Service.SMB.6.3.ClusteredAvailabilityHealthTrue01801Microsoft-Windows-SMBServerTrueErrorNormalTrueMicrosoft-Windows-SMBServer/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.SetCAFailureNotClusteredSMB server failed to set CA property on a file shareSMB server failed to set Continuously Available (CA) property on a file share.Microsoft.Windows.FileServices.Service.SMB.6.3.SetCAFailureNotClusteredMicrosoft.Windows.FileServices.Service.SMB.6.3.ClusteredAvailabilityHealthTrue01800Microsoft-Windows-SMBServerTrueErrorNormalTrueMicrosoft-Windows-SMBServer/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessAccessDeniedSMB Witness Service Protocol Security Callback FailureMicrosoft.Windows.FileServices.Service.SMB.6.3.WitnessAccessDeniedMicrosoft.Windows.FileServices.Service.SMB.6.3.ClusteredAvailabilityHealthTrue02Microsoft-Windows-SMBWitnessServiceTrueErrorNormalTrueWitnessServiceAdmin
Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessClientServerFailedSMB Witness client received error from a SMB Witness serverSMB Witness client received an error from a SMB Witness server.Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessClientServerFailedMicrosoft.Windows.FileServices.Service.SMB.6.3AvailabilityHealthTrue09Microsoft-Windows-SMBWitnessClientTrueErrorNormalTrueWitnessClientAdmin
Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessClientServerSelectionFailedSMB Witness client failed to select a SMB Witness serverSMB Witness client failed to select a SMB Witness server.Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessClientServerSelectionFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.ClusteredAvailabilityHealthTrue06Microsoft-Windows-SMBWitnessClientTrueErrorNormalTrueWitnessClientAdmin
Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessInitFailureSMB Witness Service Initialization FailedMicrosoft.Windows.FileServices.Service.SMB.6.3.WitnessInitFailureMicrosoft.Windows.FileServices.Service.SMB.6.3.ClusteredAvailabilityHealthTrue01Microsoft-Windows-SMBWitnessServiceTrueErrorNormalTrueWitnessServiceAdmin
Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessMoveFailureSMB client move request failedSMB client failed to move connection to the specified cluster node.Microsoft.Windows.FileServices.Service.SMB.6.3.WitnessMoveFailureMicrosoft.Windows.FileServices.Service.SMB.6.3AvailabilityHealthTrue030628Microsoft-Windows-SMBClientTrueErrorNormalTrueMicrosoft-Windows-SMBClient/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAdminOrBackupOperatorMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01013Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentClientNotAuthenticatedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01012Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentCreateShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01016Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentDeleteShadowCopyShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01017Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorCommitTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01006Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorExposeTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01007Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentErrorPrepareTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01005Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentGetOwnerMachineForSmbShareFailedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01015Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcClientNotSignedMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01011Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational
Microsoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentRpcServerIdleTimeoutMicrosoft.Windows.FileServices.Service.SMB.6.3.FssAgentEnabledAvailabilityHealthTrue01008Microsoft-Windows-FileShareShadowCopyAgentTrueErrorNormalTrueMicrosoft-Windows-FileShareShadowCopyAgent/Operational