Forum Discussion
Event Id 1564 Source Microsoft-Windows-FailoverClustering
I have an environment consisting of DAG and Exchange. I keep getting this error even though I haven't set up a cluster. What could be causing this problem and how can I fix it?
An Exchange DAG is built using a subset of Windows Failover Clustering services, so it will be related to that.
Dan_Snape that is, if I don't have a cluster, I have to create a cluster again, how can I solve the error. I should note that everything is working without problems at the moment
#Log Name: System
Source: Microsoft-Windows-FailoverClustering
Date: 8/31/2023 1:13:10 PM
Event ID: 1135
Task Category: Node Mgr
Level: Critical
Keywords:
User: SYSTEM
Computer: ms.stdc.local
Description:
Cluster node 'DAG' was removed from the active failover cluster membership. The Cluster service on this node may have stopped. This could also be due to the node having lost communication with other active nodes in the failover cluster. Run the Validate a Configuration wizard to check your network configuration. If the condition persists, check for hardware or software errors related to the network adapters on this node. Also check for failures in any other network components to which the node is connected such as hubs, switches, or bridges.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FailoverClustering" Guid="{baf908ea-3421-4ca9-9b84-6689b8c6f85f}" />
<EventID>1135</EventID>
<Version>0</Version>
<Level>1</Level>
<Task>5</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2023-08-31T09:13:10.2176749Z" />
<EventRecordID>593021</EventRecordID>
<Correlation />
<Execution ProcessID="35412" ThreadID="3444" />
<Channel>System</Channel>
<Computer>ms.stdc.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="NodeName">DAG</Data>
</EventData>
</Event>#- Have you done anything to the node that might cause it to go offline or not be contactable?
- no, both node is active and works properly, but i get such errors
- Log Name: System
Source: Microsoft-Windows-FailoverClustering
Date: 8/31/2023 10:41:28 AM
Event ID: 1564
Task Category: File Share Witness Resource
Level: Critical
Keywords:
User: SYSTEM
Computer: ms.stdc.local
Description:
File share witness resource 'File Share Witness (\\witness_srv.stdc.local\STDC-DAG.stdc.local)' failed to arbitrate for the file share '\\witness_srv.stdc.local\STDC-DAG.stdc.local'. Please ensure that file share '\\witness_srv.stdc.local\STDC-DAG.stdc.local' exists and is accessible by the cluster.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FailoverClustering" Guid="{baf908ea-3421-4ca9-9b84-6689b8c6f85f}" />
<EventID>1564</EventID>
<Version>0</Version>
<Level>1</Level>
<Task>34</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2023-08-31T06:41:28.5027308Z" />
<EventRecordID>592803</EventRecordID>
<Correlation ActivityID="{90d91a32-1041-4999-869b-e047c7541bca}" />
<Execution ProcessID="26188" ThreadID="32884" />
<Channel>System</Channel>
<Computer>ms.stdc.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ResourceName">File Share Witness (\\witness_srv.stdc.local\STDC-DAG.stdc.local)</Data>
<Data Name="ShareName">\\witness_srv.stdc.local\STDC-DAG.stdc.local</Data>
<Data Name="BinaryParameterLength">4</Data>
<Data Name="BinaryData">76050000</Data>
</EventData>
</Event>
