Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 28 Source: VolSnap

The shadow copy of volume <volume>: could not be created due to a failure in creating the necessary on  disk structures.
If server has been updated with SP2, there are newer hotfixes for VSS in ME967551 and ME979457.
We had the error Event ID 28 and 20 from Volume Shadow Copy Service on an Windows Server 2003 32-Bit Standard Edition wich has a 12, 8TB iSCSI connected Partition.

We tried to activate the VolumeShadowCopy but it terminates everytime with the following Error:

"Error 0x08007000e: For this ...."

As per Microsoft Online Support (found on a forum), he made the following Statement wich resolved our issue:

"Shadow Copy on your 12TB volume.

I would like to inform you that VSS has a limit of 5TB for 32 bit Operating System, which means if you want to make a snapshot of a volume larger than 5TB, you will get an error saying that not enough storage is available to complete this operation.

If your Operating System architecture is 64 bit, please take a look at the Application event log and check if any related error (usually Event Source is VolSnap) exists."

In my case i divided the drives into 3 parts each. Each part less than 5TB to enable the VSS.

Little Note: If you are using Backup Exec, also with Remote Agents, Bex tries to backup this partition with VSS. But BEX would fail!
See ME833167 for a Volume Shadow Copy Service (VSS) update package for Windows Server 2003. See ME887827 for a newer version on this package.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.