Failover Cluster Logging and Events

Recover Cluster Event Entries in Failover Cluster Manager:

Is there a way to recover the Cluster Events after the Reset Recent Events option is triggered?

  • Server 1 in Cluster A
  • Server 1 is evicted and updated
  • Server 1 Re-Configured joined to domain and reintroduced to cluster

In this Scenario, there should be several events.

  • Evict Event
  • Join cluster Event

Are these logs stored anywhere other than on Server 1 and the failover-cluster Manager?
LVL 13
ITguy565Asked:
Who is Participating?
 
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
The second link in my initial response explains how to fine tune the FCM Log Viewer to pull out what we want.
1
 
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
I have a blog post that outlines how to tune the logging in Failover Cluster Manager.

EDIT: This is the correct post though the above one is also informative.
1
 
ITguy565Author Commented:
Phillip,

The posts are very informative however, I am looking for information on once the log has been cleared *aka not saved* is the information stored anywhere else that you can query?

Filtering the log and troubleshooting while it is there is fairly straight forward, but one of our techs decided to clear the events and we need information on a time frame.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
The Reset Events in FCM does not clear the logs. It clears the indicators in FCM.

There may be some PowerShell to clear the actual cluster logging, but I've not seen it that I can remember. There is a set of PowerShell commandlets that allow logging to be turned up or down depending on what's being looked at.

The only way to clear node related events is in the node's Event Logs as is the usual way.
1
 
ITguy565Author Commented:
Awesome news, How do you access the events once they no longer show in the Failover Cluster Manager?
0
 
ITguy565Author Commented:
Awesome! Thanks for the assistance!
0
 
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
You're welcome. :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.