Summary
The FailoverCluster Multinode – Windows Server troubleshooter for Support Diagnostic Platform collects information to help troubleshoot most FailoverCluster problems.
More Information
The FailoverCluster Multinode – Windows Server troubleshooter for Support Diagnostic Platform can be run on any Windows 7-based or Windows Server -based computer that is located in the same domain as the FailoverCluster that you want to obtain data from. If the troubleshooter detects that the local computer is not member of a cluster, it prompts for the name of one of the nodes of the cluster.
The troubleshooter connects to the FailoverCluster service, and displays a of the names of all cluster nodes. You must select one or more computers from which to obtain data. The troubleshooter connects to the selected computer by way of the network, and gets the following information from every selected computer.
Memory Dumps and related information
Hotfixes and Updates
Printer and Print drivers information
Networking Basic Information
File Version Information
Registry Keys
Deployment Logs
Servicing Logs
Storage/Disk Information
Devices and Drivers
Server Manager/ Roles Information
Hyper-V Role
FailoverCluster Feature
Best Practice Analyzer output
Virtualization
Other
Additional Information
In additional to the files collected and listed in this article, this troubleshooter can detect one or more of the following situations:
The troubleshooter connects to the FailoverCluster service, and displays a of the names of all cluster nodes. You must select one or more computers from which to obtain data. The troubleshooter connects to the selected computer by way of the network, and gets the following information from every selected computer.
Information collected
Event Logs - General| Description | File Name |
| Event Log – Application – text, csv and evtx formats | {Computername}_evt_Application.* |
| Event Log – System – text, csv and evtx formats | {Computername}_evt_System.* |
Memory Dumps and related information
| Description | File Name |
| Information about Machine Memory Dumps, User memory dumps and memory dump configuration | {Computername}_DumpReport.* |
| Mini machine memory dumps generated from 30 days ago or newer | {Computername}_dmp_*.zip |
Hotfixes and Updates
| Description | File Name |
| Installed Updates/ Hotfixes | {Computername}_Hotfixes.* |
Printer and Print drivers information
| Description | File Name |
| Information about Print drivers and printers, including print monitors, processors and print driver file version information | {Computername}_PrintInfo.* |
Networking Basic Information
| Description | File Name |
| Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output | {Computername}_TcpIp-Info.txt |
| Basic SMB configuration information based on output of net.exe utility | {Computername}_SMB-Info.txt |
| Networking Diagnostic output using netdiag.exe utility | {Computername}_NetDiag.txt |
| Netsh ‘int ipv4’ and subcommands output | {Computername}_TCPIP-Netsh-IPv4.txt |
| Netsh ‘int ipv6’ and ‘int 6to4’ subcommands output | {Computername}_TCPIP-Netsh-IPv6.txt |
| Netsh ‘int tcp’ subcommands output | {Computername}_TCPIP-Netsh-TCP.txt |
File Version Information
| Description | File Name |
| File version information from %windir%\cluster\*.* | {Computername}_sym_Cluster.* |
| File version information from %windir%\system32\*.dll | {Computername}_sym_System32_dll.* |
| File version information from %windir%\system32\*.exe | {Computername}_sym_System32_exe.* |
| File version information from %windir%\system32\*.sys | {Computername}_sym_System32_sys.* |
| File version information from %windir%\system32\drivers folder | {Computername}_sym_Drivers.* |
| File version information from %windir%\system32\drivers\*.* | {Computername}_sym_SysWOW64_sys.* |
| File version information from {Program Files (x86}}\*.sys | {Computername}_sym_ProgramFilesx86_sys.* |
| File version information from {Program Files}\*.sys | {Computername}_sym_ProgramFiles_sys.* |
| File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.* | {Computername}_sym_MS_Iscsi.* |
| File version information from all drivers currently running on machine | {Computername}_sym_RunningDrivers.* |
| File version information from all processes currently running on machine | {Computername}_sym_Process.* |
| File version information from print spooler folder %windir%\system32\Spool\*.* | {Computername}_sym_PrintSpooler.* |
Registry Keys
| Description | File Name |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion HKLM\Software\Microsoft\Windows\CurrentVersion | {Computername}_reg_CurrentVersion.TXT |
| HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall | {Computername}_reg_Uninstall.TXT |
| HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions | {Computername}_reg_ProductOptions.TXT |
| HKLM\System\MountedDevices | {Computername}_reg_MountedDevices.* |
| HKLM\System\CurrentControlSet\Control\CrashControl HKLM\System\CurrentControlSet\Control\Session Manager HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options HKLM\Software\Microsoft\Windows\Windows Error Reporting HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting | {Computername}_reg_Recovery.TXT |
| HKCU\Software\Microsoft\Windows\CurrentVersion\Run HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run HKLM\ Software\Microsoft\Windows\CurrentVersion\Run HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit | {Computername}_reg_Startup.TXT |
| HKLM\SYSTEM\CurrentControlSet\Control\Print | {Computername}_reg_Print.HIV |
| HKCU\Software\Policies HKLM\Software\Policies HKCU\Software\Microsoft\Windows\CurrentVersion\Policies HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies | {Computername}_reg_Policies.txt |
| HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones | {Computername}_reg_TimeZone.txt |
| HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access HKLM\SYSTEM\CurrentControlSet\Services\TermService HKLM\SYSTEM\CurrentControlSet\Services\TermDD | {Computername}_reg_TermServices.txt |
| HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb HKLM\SYSTEM\CurrentControlSet\Services\SMB HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10 HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20 | {Computername}_reg_SMB.txt |
| HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters | {Computername}_reg_TCPIPParameters |
| HKLM\SYSTEM\CurrentControlSet\Services\VSS | {Computername}_reg_VSS.TXT |
| HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt HKLM\SOFTWARE\Microsoft\iSCSI Target HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI | {Computername}_reg_iSCSI.TXT |
| HKLM\System\CurrentControlSet\Control\MPDev HKLM\System\CurrentControlSet\Control\iSCSIPrt HKLM\System\CurrentControlSet\Services\MSiSCSI HKLM\System\CurrentControlSet\Services\MSDsm HKLM\System\CurrentControlSet\Services\MPIO HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318} HKLM\System\CurrentControlSet\Services\Tcpip | {Computername}_reg_Storage.TXT |
| HKLM\SYSTEM\CurrentControlSet\Enum | {Computername}_reg_Enum.TXT |
| HKLM\System\CurrentControlSet\services\ClusSvc HKLM\System\CurrentControlSet\services\CluDisk | {Computername}_reg_ClusSvc.TXT |
| HKLM\Cluster | {Computername}_Cluster.hiv |
Deployment Logs
| Description | File Name |
| Setupact.log from folders: %windir% %windir%\Panther %windir%\Panther\UnattendedGC | {Computername}_Setupact-*.log |
| Setupapi logs located on %windir%\inf folder | {Computername}_SetupApi.app.log {Computername}_SetupApi.evt.log {Computername}_SetupApi.offline.log |
| Setuperr.log located on Windows folder | {Computername}_Setuperr.log |
| Upgrade log – SetupReport.txt from windows\panther folder | {Computername}_SetupReport.txt |
Servicing Logs
| Description | File Name |
| Component-Based Servicing Logs located on %windir%\Logs\CBS | {Computername}_CBS*.log |
| DPX Setup Act log located on %windir%\logs\DPX | {Computername}_setupact.log" |
| Pending Operations Queue Exec log located on %windir%\winsxs | {Computername}_poqexec.log |
| Windows Side-by-Side Pending Bad log located on %windir%\ winsxs | {Computername}_pending.xml.bad |
| Windows Side-by-Side Pending log located on %windir%\ winsxs | {Computername}_pending.xml |
Storage/Disk Information
| Description | File Name |
| Information from machine disk sectors generated by SecInspect.exe utility | {Computername}_Secinspect.txt |
| iSCSI related information generated by iscsicli.exe utility | {Computername}_iSCSIInfo.txt |
| Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility | {Computername}_StorageEventLogs.htm |
| Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information | {Computername}_FCInfo.txt |
| Dispart’s SAN policy information | {Computername}_DiskpartSANPolicy.TXT |
Devices and Drivers
| Description | File Name | |
| Devices and connection information generated by devcon utility | {Computername}_Devcon.log | |
| Minifilter drivers enumeration using Fltmc.exe utility | {Computername}_Fltmc.TXT | |
| MS-DOS device names using dosdev utility | {Computername}_DosDev.txt | |
| Output from Driver Verifier Manager (verifier.exe) utility | {Computername}_Verifier.txt | |
| Upper and lower filters Information using fltrfind.exe utility | {Computername}_FltrFind.txt | |
| Information about driver signature using driverquery.exe | {Computername}_SignedDrivers.txt | |
| iSCSI Information using iscsicli.exe utility | {Computername}_iSCSIInfo.txt | |
Server Manager/ Roles Information
| Description | File Name | |
| Information about server roles installed on a server generated by servermanagercmd.exe | {Computername}_ServerManagerCmdQuery.* | |
| Server manager log file located at %windir%\logs\ServerManager.log | {Computername}_ServerManager.log | |
| SeverCore OCList output | {Computername}_OptionalComponents.txt | |
Hyper-V Role
| Description | File Name |
| Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats | {Computername}_evt_HyperV*.* |
| Hyper-V Configuration and Virtual Machine Information | {Computername}_HyperV-Info.htm |
| Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml | {Computername}_{VirtualMachineGUID}.xml |
| Hyper-V Best Practice Analyzer output in html format* | {Computername}_HyperV_BPAInfo.HTM |
FailoverCluster Feature
| Description | File Name |
| Cluster Logs generated by Get-ClusterLog PowerShell cmdlet | {Computername}_Cluster.Log |
| Cluster MPS Tool (clusmps.exe) output | {Computername} _Cluster_MPS_Information.txt |
| Cluster validation reports files located at \Windows\Cluster\Reports\*.mht | {Computername} _*.mht |
| Cluster reports XML files located at \Windows\Cluster\Reports\*.xml | {Computername} _*.xml |
| Cluster validation log files from \Windows\Cluster\Reports\Validate*.log | {Computername}_Validade*.log |
| Cluster resources properties using PowerShell Get-ClusterResource cmdlet | {Computername}_ClusterProperties.txt |
| Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet | {Computername}_DependencyReport.mht |
| Cluster Shared Volume information – html format | {Computername}_CSVInfo.htm |
| Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet | {Computername}_ValidationReport.mht |
| Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats | {Computername}_evt_FailoverClustering*.* |
Best Practice Analyzer output
| Description | File Name |
| Hyper-V Best Practice Analyzer output in html format Note: KB 977238 needs to be installed to obtain this output | {Computername}_HyperV_BPAInfo.HTM |
Virtualization
| Description | File Name |
| Basic information about machine virtual environments | {Computername}_Virtualization.* |
Other
| Description | File Name |
| Resultant Set of Policy (RSoP) generated by gpresult.exe utility | {Computername}_GPResult.* |
| System Information - MSInfo32 tool output – txt and nfo formats | {Computername}_msinfo32.* |
| Volume Shadow Copy Service (VSS) information | {Computername}_VSSAdmin.txt |
| Boot Configuration Data (BCD) configuration via bcdedit.exe tool output | {Computername}_BCDEdit.txt |
| Schedule Tasks information (csv and txt) generated by schtasks.exe utility | {Computername}_schtasks.* |
| Information about process and threads using pstat.exe tool | {Computername}_PStat.txt |
Additional Information
In additional to the files collected and listed in this article, this troubleshooter can detect one or more of the following situations:
- Machine is running on a virtual environment
- Presence of a machine memory dumps in the past 30 days
- Presence of a user mode memory dumps in the past 30 days
- Problems related with machine memory dump configuration
- Unexpected Shutdown Event Logs on System Log from past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)
Machine Memory Dump related event logs on System log from past 30 days (Events 1001 from Save Dump) - Pre-release version of Windows Server 2008 R2
- Evaluation versions of Windows Server 2008 R2
Any of the hosted Hyper-V virtual machines from an Hyper-V host is using more than 80% of CPU - Cluster service of a FailoverCluster node is not running
- The state of any of the cluster nodes is Down
- Any of the cluster groups is down
- A problem obtaining cluster information
- Any of the Cluster Shared Volumes is in Maintenance state
- Any of the Cluster Shared Volumes is in Redirect state
- A node is unable to access any of the Cluster Shared Volumes locally
- A node is unable to access any of the Cluster Shared Volumes via network
- An error to run the Cluster validation report
- An error was detected by the Cluster Validation report
- Unable to contact the Service Control Manager (SCM) of any cluster node
References
For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2