• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2091
  • Last Modified:

Event Log Error and Warning Help

I have seen certain warnings at the event log and its gone back several months. I want to know if these warnings are critical or your typical warnings that are harmless. I called dell and they said if we use the dell server mangement tool we can determine if the hard drives are good. The hard drives and the raid are good. There are no oranges lights all are green.

These are the warning

Source Ntfs       Event ID 57   Task Category (2)
"The system failed to flush data to the transaction log. Corruption may occur"

Source Disk       Event ID 51   Task Category None
"An error was detected on device \Device\Harddisk3\DR371 during a paging operation"
"An error was detected on device \Device\Harddisk3\DR380 during a paging operation"
"An error was detected on device \Device\Harddisk3\DR353 during a paging operation"
"An error was detected on device \Device\Harddisk3\DR335 during a paging operation"
"An error was detected on device \Device\Harddisk4\DR32 during a paging operation"

Source volsnap Event ID 27   Task Category None
The shadow copies of volume \\?\Volume{de2911b4-8d38-11e0-8905-842b2b011095} were aborted during detection because a critical control file could not be opened.
(We dont even have shadow copies running on this server. It is only on one of the VM's which is the second HDD of the file server)

These errors and warning will pop up once a day and its not a lot of them. The Disk source has 5 in a row and thats it for the day. The volsnap 1 or maybe 2 in a day.
0
IT_Fanatic
Asked:
IT_Fanatic
  • 9
  • 8
1 Solution
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
These warnings are critical, and eventually disk or disks will fail.

If the disks support you should be able to check with Smart Disk Tools, ensure you have good backups.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
there are areas on the disk which are faulty. Are these individual disks! any RAID, what make and model of disks?
0
 
IT_FanaticAuthor Commented:
where can i get smart disk tools? I have 8 SAS 6Gb 15k Hard drives that are 450GB each. Its on a RAID 5.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Okay, if it's RAID 5, there's an issue with the RAID controller or RAID set. Smart Tools will not detect the individual disks. I would check with Dell Diagnostics.
0
 
IT_FanaticAuthor Commented:
Hm we ran every diagnostics dell said to do and they see nothing wrong. They said if you see those errors poping up constantly then thats another thing. But if you see them pop up 4 in a row everyday and thats it, that we should be fine. Any input on this?
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
I still do not think errors like this in the logs are correct, they will affect the performance of the server when it halts for a moment on a bad block.
0
 
IT_FanaticAuthor Commented:
You think its best to just have Dell replace the HDD's
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Yes. most definately.
0
 
IT_FanaticAuthor Commented:
I did some research and found this http://support.microsoft.com/kb/244780

I wonder if I get these errors because I need more RAM on  the server. What do you think about the article?
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Never heard of adding RAM will cure disk faults, and I've always seen this error when disks are having issues.

Decode the error as per article.
0
 
IT_FanaticAuthor Commented:
Can you help me with this error code? Dont really know how to decry pt these things. If you don't mind of course.

 System

  - Provider

   [ Name]  Disk
 
  - EventID 51

   [ Qualifiers]  32772
 
   Level 3
 
   Task 0
 
   Keywords 0x80000000000000
 
  - TimeCreated

   [ SystemTime]  2011-10-18T04:44:46.291044600Z
 
   EventRecordID 303185
 
   Channel System
 
   Computer DN.Abc.com
 
   Security
 

- EventData

   \Device\Harddisk3\DR465
   030080000100000000000000330004802D0100000E0000C00000000000000000000000000000000064EE1D0D00000000FFFFFFFF01000000580000080200000CF1200A124203204000100000A0000000000000000000000018D7501880FAFFFF0000000000000000409D281A80FAFFFF00000000000000007FE079230000000028002379E07F00000800000000000000000000000000000000000000000000000000000000000000


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 00800003 00000001 00000000 80040033
0008: 0000012D C000000E 00000000 00000000
0010: 00000000 00000000 0D1DEE64 00000000
0018: FFFFFFFF 00000001 08000058 0C000002
0020: 120A20F1 40200342 00001000 000000A0
0028: 00000000 00000000 1850D718 FFFFFA80
0030: 00000000 00000000 1A289D40 FFFFFA80
0038: 00000000 00000000 2379E07F 00000000
0040: 79230028 00007FE0 00000008 00000000
0048: 00000000 00000000 00000000 00000000
0050: 00000000 00000000  


In Bytes

0000: 03 00 80 00 01 00 00 00   ..¿.....
0008: 00 00 00 00 33 00 04 80   ....3..¿
0010: 2D 01 00 00 0E 00 00 C0   -......À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 64 EE 1D 0D 00 00 00 00   dî......
0030: FF FF FF FF 01 00 00 00   ÿÿÿÿ....
0038: 58 00 00 08 02 00 00 0C   X.......
0040: F1 20 0A 12 42 03 20 40   ñ ..B. @
0048: 00 10 00 00 A0 00 00 00   .... ...
0050: 00 00 00 00 00 00 00 00   ........
0058: 18 D7 50 18 80 FA FF FF   .×P.¿úÿÿ
0060: 00 00 00 00 00 00 00 00   ........
0068: 40 9D 28 1A 80 FA FF FF   @(.¿úÿÿ
0070: 00 00 00 00 00 00 00 00   ........
0078: 7F E0 79 23 00 00 00 00   ày#....
0080: 28 00 23 79 E0 7F 00 00   (.#yà..
0088: 08 00 00 00 00 00 00 00   ........
0090: 00 00 00 00 00 00 00
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Let me have a look, I'll post back later.
0
 
IT_FanaticAuthor Commented:
Hi Hanccocka any luck with this? Dell sells its not the server or storage server. It could be our backup software since the errors occur when the backups start. But not everyday. It is usually Mondays.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Sorry got side tracked! I look now...
0
 
IT_FanaticAuthor Commented:
no problem I appreciate the help
0
 
IT_FanaticAuthor Commented:
IT appears the the errors occurred when Acronis was running backups. When I compared the event log warning times to the completed tasks of Acronis. I was able to point that the errors came from the File server VM. When I looked at the file server I noticed VSS errors. I fixed those errors by deleting the previous shadow copy plan and recreated it. The error has not appeared since. So I did some troubleshooting and decided let me turn off shadow copies. To my surprise no disk errors on the main server . Once I turned on shadow copies on the file server the disk error appeared. Then I turned off the shadow copies again its been a week and no errors. It appears that Acronis is have an issue backing up this machine with the shadow copies.
0
 
IT_FanaticAuthor Commented:
This is the issue and what worked to resolve it.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 9
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now