| Event Id | 18 |
| Source | WLBS |
| Description | Duplicate cluster subnets detected. The network may have been inadvertently partitioned. |
| Event Information | CAUSE: This event is generated on the remerging of a cluster that has been split into more than one cluster. This event can be caused by: Pulling the net tap on a server, which will cause the server to converge with itself and two clusters will form. Severing a trunk between two switches if the cluster is deployed across them. A malfunctioning switch or a switch flooded by network congestion. RESOLUTION: During the time that the cluster was partitioned, the members of the cluster converged into two or more separate clusters. This event is an informational message that reports the network had been partitioned and the WLBS hosts now have correctly converged in just one cluster. This event is benign but if it is logged repeatedly there may be an issue with the underlying network or the network infrastructure may be insufficient for the volume of traffic. Another explanation from Microsoft. Error Message Explanation: The hosts in this cluster formed two or more separate clusters. This is usually caused by network partitioning that prevents the Network Load Balancing (NLB) heartbeats of one or more hosts from reaching all of the other hosts in the cluster. This event is logged when the network problem is corrected and the hosts converge back into a single cluster. User Action (Windows Server 2003): Investigatethe cause of the network partitioning. No investigation of NLB is necessary. User Action (Windows 2000 Server): Investigate the cause of the network partitioning. No investigation of NLB is necessary. |
| Reference Links | WLBS Event 18 Appears in Event Viewer |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.