Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Event ID 57 is logged in the System log of the destination cluster node when you move a resource group to another node of a Windows Server 2003-based server cluster


View products that this article applies to.

Symptoms

When you move a resource group to a different cluster node on a Microsoft Windows Server 2003-based server cluster, the following event is logged many times in the System log of the destination cluster node:

Event Type: Warning
Event Source: Ftdisk
Event ID: 57
Description: The system failed to flush data to the transaction log. Corruption may occur.

Additionally, many informational messages that resemble the description text in the previous event are logged in the %SYSTEMROOT%\Cluster\Cluster.log file.

You experience this problem if the following conditions are true:
  • The resource group contains many disk resources.

    Note You may experience this problem when you try to move a resource group that contains as few as five Physical disk resources. However, you are more likely to experience this problem when you try to move a resource group that contains eight or more Physical disk resources.
  • You move the resource group to a cluster node that has not hosted the resource group since the cluster node has been restarted.

↑ Back to the top


Cause

This problem occurs if a program or driver that is installed on the affected cluster node delays the Plug and Play (PnP) notification process. A delay in the PnP notification process lets the NTFS file system mount newly-arrived volumes at the same time that the NTFS file system detects other arriving volumes. In this situation, the following symptoms occur:
  • After all the volumes have arrived at the destination cluster node, the Cluster service briefly takes the volumes offline.
  • Because one or more of the volumes have already been mounted, the NTFS file system tries to flush the transaction log of each mounted volume before the volume is taken offline.
  • Because the cluster disk driver (Clusdisk) blocks I/O operations during the process to take the volumes offline, the NTFS file system is unable to flush the transaction log.
  • The volume manager disk driver (Ftdisk) logs the failure to flush the transaction log as event ID 57. This event is logged in the System log on the affected server.

↑ Back to the top


Resolution

To resolve this problem, try to determine which program or driver is delaying the PnP notifications. Then, remove the program or driver. Alternatively, contact the appropriate software vendor to determine whether an update is available for the program or driver.

For information about your hardware manufacturer, visit the following Web site: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

↑ Back to the top


Keywords: KB931266, kbprb, kbeventlog, kbclustering, kbtshoot

↑ Back to the top

Article Info
Article ID : 931266
Revision : 4
Created on : 2/22/2007
Published on : 2/22/2007
Exists online : False
Views : 232