Event Log Entries May Appear Incomplete on Mixed Windows 2000 and Windows Server 2003 Clusters (307781)

The information in this article applies to:

Microsoft Windows Server 2003, Standard Edition

This article was previously published under Q307781

SYMPTOMS

When you are running in a mixed version cluster (Microsoft Windows 2000 and Windows Server 2003) and you view entries in the Event Log on the Windows 2000 node, the entries may appear to be missing information. For example:

Event Type: Error
Event Source: ClusSvc
Event Category: Object Mgr
Event ID: 1069

Description: Cluster resource 'XYZ Resource' in Resource Group '%2' failed.

This may occur even though you would expect that the group name that contains 'XYZ Resource' is displayed instead of a '%2' value.

CAUSE

The Cluster Service replicates EventLog entries to all nodes in the cluster. Windows 2000 only uses one argument while Windows Server 2003 can accept multiple arguments. If the Windows Server 2003 node created the Event Log entry, it will have multiple arguments embedded in the log. When this same entry is viewed on a Windows 2000 node, it cannot properly interpret any arguments except for the first one.

RESOLUTION

View the Event Log entry on a Windows Server 2003 cluster node.

MORE INFORMATION

For additional information about topics that are related to the issue, click the article numbers below to view the articles in the Microsoft Knowledge Base:

283078 Event Log Replication on Cluster Node Generates Event ID 1137

294893 Viewing Saved FRS, DNS and Directory Service Event Logs

Modification Type:	Major	Last Reviewed:	11/5/2003
Keywords:	kbprb kbui KB307781