Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
A corruption was discovered in the file system structure on volume C:.
The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x100000000b8b5. The name of the file is "\Windows\System32\config\SOFTWARE.LOG1".
|English: Request a translation of the event description in plain English.|
From a support forum:
My issue is been resolved by following this article: EV100570 (My Disk is Read-only, Help!).
I find this happens intermittently as Windows Server Backup backs up a Hyper-V host and VSS creates temporary volumes. The volumes that error out are always the VSS volumes, and are gone by the time I can check it out. Host disk (array) is healthy, per Dell OMSA and CHKDSK. Not 100% confident there's no underlying problem, especially since this is a recent development.
The first step in troubleshooting this event is to make a backup of the data stored on the affected system. This should be followed by hard disk check (hardware utilities if available), chkdsk ran against the partitions, update of firmware for I/O controllers and hard disks, update of Windows and the applications installed. Any storage attached to the system (external disks, USB drives, cameras, scanners) may be related to the problem, so they should be disconnected during the troubleshooting process. In certain conditions, a corrupted pagefile may be the source of the problem so if possible, it should be moved to another drive and deleted from the original one.
If these steps fail to fix the problem, there might be a physical problem with one of the drives so it should be identified and replaced as soon as possible.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
|Custom search for *****: Google - Bing - Microsoft - Yahoo|
Send comments or solutions
- Notify me when updated