Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1120 Source: ClusSvc

The DLL associated with cluster disk resource <resource name> is attempting to change the drive letter parameters from <old parameter> to <new parameter> in the cluster hive. If your restore database operation failed, this could be caused by the replacement of a quorum drive with a different partition layout from the original quorum drive at the time the database backup was made. If this is the case and you would like to use the new disk as the quorum drive, we suggest that you stop the cluster disk service, change the drive letter(s) of this drive to Letter, start the cluster disk service and retry the restore database procedure.
This can be recorded in "one node" cluster setups and it is expected as the cluster requires an external disk resource in order to function properly (regardless of the "testing" one node setup option).
One user got this message when they replaced the quorum disk hardrive on a Windows 2000 Cluster (and performed the steps described in ME280425 for replacing a failed drive).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.