asked on

Microsoft Server 2008 Failover Cluster Error Event ID 1230

We are getting the following error, Event ID 1230. Cluster resource 'FileServer-(xxxx)(Cluster Disk 3)' (resource type", DLL "clusres.dll') either crashed or deadlocked. The Resource Hosting Subsystem (RHS) process will now attempt to terminate, and the resource will be marked to run in a separate monitor.

No RESRCMON.DMP was created, so I can't troubleshoot to find the dll causing the problem.

Suggestions anyone.

It seems to me once RHS blows up the cluster resouces also blow up; theses include a FSRM report, TSM (Tivoli Storage Manager) Client Acceptor, and TSM Scheduler Services.

ASKER CERTIFIED SOLUTION

K-H

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SRSECCBC

ASKER

I'm looking at that technet article. The cluster disk in question already running in its own resource monitor. Connectivity to the Quorum seems to be fine, however the disks are in a NetApp SAN. I was informed the Snapshot feature was installed, but is now removed.
I think it could be four possiblities, a) anti-virus software running a scan, b) loss of connectivity to the SAN, c) TSM doing a backup, d) residual unregistered dll's from the NetApp SnapShot program.

Question is how can I determine this without a crash dump file? Is there a way to turn on more logging?

Attached is the full details of the event ID 1230.
RHS-Error.txt