Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The default transaction resource manager on volume C: encountered an error while starting and its metadata was reset. The data contains the error code.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the transaction resource manager?
From a support forum, posted by a user that had this error in the event log and had trouble in getting the FSUTIL resource setautoreset command to work on C:
FSUTIL seemed to work for other drives, but for C: it complained about a missing Resource manager.
Finally I found this, which allowed me to clean the CLFS logs and run the FSUTIL command (for C:\ ) after reboot - ME948252.
Explanation: This problem occurs because, after the System Restore is performed, the Common Log File System (CLFS) transaction logs may be left in an inconsistent state. When the CLFS transaction logs are in an inconsistent state...
To resolve this problem, delete the .blf files and the .regtrans-ms files from the %Windir%\System32\SMI\Store\Machine folder.
After you restart the computer, the registry regenerates the deleted files. These regenerated files are in a consistent state.
Curiously, that ME948252 references ME939399 which leads to the same FixIt solution 50140 as ME956699 and ME939615.
However, the manual commands given in the article ME948252 are different, and they finally helped me to get the FSUTIL command to work."
One user experienced this problem with a volume running on top of an iSCSI external storage unit. The lack of hardware reliability led to data being lost (so this event was just a side effect).
According to EV100251 (Symantec Article TECH110992), this event can be ignored if it occurs after a NTFS Vista partition is restored using Ghost or an Altiris backup.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
|Custom search for *****: Google - Bing - Microsoft - Yahoo|
Send comments or solutions
- Notify me when updated