| Event Id | 26180 |
| Source | Chkdsk |
| Description | "Checking file system on S: The type of the file system is NTFS. Volume label is S_Drive. The MFT mirror is different from the MFT. Correcting errors in the Master File Table (MFT) mirror. Windows has made corrections to the file system." |
| Event Information | According to Microsoft: RESOLUTION: To capture detailed information by using chkdsk, stop the cluster server. To schedule chkdsk to run the next time that you restart the cluster, and have the results logged in the Application log as part of the autochk process: 1. Shut down all but one node in the cluster. 2. On the remaining node, use the following settings: Cluster Disk - Manual Cluster Service - Manual 3. Run chkdsk by typing the following line, and then click Yes to schedule it for the next time that you restart the cluster server: chkdsk drive: /f 4. Restart the cluster server to run the autochk command .The autochk results are logged in the Application log with the source "AUTOCHK." 5. Reset Cluster Disk and Cluster Server back to the original settings: Cluster Disk - System Cluster Service - Automatic 6. Restart the computer. Verify that the cluster server starts, and then bring the other nodes online. |
| Reference Links | Location of the Chkdsk Results for Windows Clustering Resources |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.