| Event Id | 1137 |
| Source | ClusSvc |
| Description | Event Log replication queue OUTQ is full. xxx event(s) is (are) discarded of (total) size xxx. |
| Event Information | According to microsoft : This issue occurs because server clusters send event log entries from each node to all other nodes in the cluster so that each node has all of the event log entries. This behavior helps the administrator identify issues with the cluster and reduces the administrative task of having to check each nodes event log. When the cluster nodes are up, they actively exchange event log messages. If the rate of the logged messages exceeds the rate with which messages are being sent to other nodes, some of the event messages may be dropped. This behavior is expected. If the message is dropped, the event is still written to the local node. However, they are not written to the remote nodes. This behavior prevents disruptions in programs that are attempting to log an entry when the replication cannot keep up. When the Cluster service starts, it may receive many event log messages that occurred on the system before the Cluster service was started. If the number of messages exceeds the size limit of the queue, the messages are dropped. Resolution If the cluster server is a print server, disable the Informational print messages option in the Spooler properties. This option may cause excessive event log entries. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.