Failover Cluster Logging and Events

Recover Cluster Event Entries in Failover Cluster Manager:

Is there a way to recover the Cluster Events after the Reset Recent Events option is triggered?

  • Server 1 in Cluster A
  • Server 1 is evicted and updated
  • Server 1 Re-Configured joined to domain and reintroduced to cluster

In this Scenario, there should be several events.

  • Evict Event
  • Join cluster Event

Are these logs stored anywhere other than on Server 1 and the failover-cluster Manager?
LVL 15
ITguy565Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Philip ElderTechnical Architect - HA/Compute/StorageCommented:
I have a blog post that outlines how to tune the logging in Failover Cluster Manager.

EDIT: This is the correct post though the above one is also informative.
1
ITguy565Author Commented:
Phillip,

The posts are very informative however, I am looking for information on once the log has been cleared *aka not saved* is the information stored anywhere else that you can query?

Filtering the log and troubleshooting while it is there is fairly straight forward, but one of our techs decided to clear the events and we need information on a time frame.
0
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
The Reset Events in FCM does not clear the logs. It clears the indicators in FCM.

There may be some PowerShell to clear the actual cluster logging, but I've not seen it that I can remember. There is a set of PowerShell commandlets that allow logging to be turned up or down depending on what's being looked at.

The only way to clear node related events is in the node's Event Logs as is the usual way.
1
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

ITguy565Author Commented:
Awesome news, How do you access the events once they no longer show in the Failover Cluster Manager?
0
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
The second link in my initial response explains how to fine tune the FCM Log Viewer to pull out what we want.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ITguy565Author Commented:
Awesome! Thanks for the assistance!
0
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
You're welcome. :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.