View Events and Logs for a Failover Cluster
Applies To: Windows Server 2008 R2
When you view events through the Failover Cluster Manager snap-in, you can see events for all nodes in the cluster instead of seeing events for only one node at a time.
For information about viewing the reports from the failover cluster wizards, see View Reports of the Actions of Failover Cluster Wizards.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at https://go.microsoft.com/fwlink/?LinkId=83477.
To view events and logs for a failover cluster by using the Windows interface
In the Failover Cluster Manager snap-in, if the cluster is not displayed, in the console tree, right-click Failover Cluster Manager, click Manage a Cluster, and then select or specify the cluster that you want.
If the console tree is collapsed, expand the tree under the cluster for which you want to view events.
In the console tree, right-click Cluster Events and then click Query.
In the Cluster Events Filter dialog box, select the criteria for the events that you want to display.
To return to the default criteria, click the Reset button.
To sort the events, click a heading, for example, Level or Date and Time.
To view a specific event, click the event and view the details in the Event Details pane.
To open the failover cluster snap-in, click Start, click Administrative Tools, and then click Failover Cluster Manager. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.
You can also use Event Viewer to open a log related to failover clustering. To locate the log, in Event Viewer, expand Applications and Services Logs, expand Microsoft, expand Windows, and then expand FailoverClustering. The log file is stored in systemroot\system32\winevt\Logs.
For troubleshooting information for failover clusters, see https://go.microsoft.com/fwlink/?LinkId=137836.