Event ID - 1556

Event Id	1556
Source	Microsoft-Windows-FailoverClustering
Description	The cluster service encountered an unexpected problem and will be shut down. The error code was '%2'.
Event Information	According to Microsoft : Cause : This event is logged when cluster service encountered an unexpected problem and will be shut down. Resolution : Check for conditions that interfere with the running of the Cluster service There are various software or hardware related causes that can interfere with the running of the Cluster service on a node. Sometimes the Cluster service can restart successfully after it has been interrupted by one of those causes. Review the event logs for indications of the problem. A recommended order for troubleshooting is as follows: Hardware Operating system Networking Security Cluster service Clustered applications or services Although a problem might appear to be related to an application, most often, the problem is related to items 1, 2, 3, or 4 in the preceding list. A useful step is to review the system event log and the cluster diagnostic log file for events that happened around the time of the failure. If you do not currently have Event Viewer open, see "Opening Event Viewer and viewing events related to failover clustering." If the event contains an error code that you have not yet looked up, see "Finding more information about error codes that some event messages contain." To perform the following procedures, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority. Opening Event Viewer and viewing events related to failover clustering To open Event Viewer and view events related to failover clustering: If Server Manager is not already open, click Start , click Administrative Tools , and then click Server Manager . If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue . In the console tree, expand Diagnostics, expand Event Viewer , expand Windows Logs , and then click System . To filter the events so that only events with a Source of FailoverClustering are shown, in the Actions pane, click Filter Current Log . On the Filter tab, in the Event sources box, select FailoverClustering . Select other options as appropriate, and then click OK . To sort the displayed events by date and time, in the center pane, click the Date and Time column heading. Finding more information about the error codes that some event messages contain To find more information about the error codes that some event messages contain: View the event, and note the error code. Look up more information about the error code in one of two ways: Search System Error Codess. Click Start , point to All Programs , click Accessories , click Command Prompt , and then type: NET HELPMSG errorcode Verify : Confirm that the nodes are running and that the backup or restore process succeeded. To perform this procedure, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority. Viewing the status of the nodes in a failover cluster To view the status of the nodes in a failover cluster: To open the failover cluster snap-in, click Start , click Administrative Tools , and then click Failover Cluster Management . If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue . In the Failover Cluster Management snap-in, if the cluster you want to manage is not displayed, in the console tree, right-click Failover Cluster Management , click Manage a Cluster , and then select or specify the cluster that you want. If the console tree is collapsed, expand the tree under the cluster you want to manage, and then click Nodes . View the status for each node. If a node is Up , the Cluster service is started on that node. Another way to view node status is to run a command on a node in the cluster. Using a command to view the status of the nodes in a failover cluster To use a command to view the status of the nodes in a failover cluster: On the node that you are checking, click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . Type: CLUSTER NODE /STATUS If the node status is Up , the Cluster service is started on that node.
Reference Links	Event ID 1556 from Microsoft-Windows-FailoverClustering

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught