I
inittab
Guest
Having some issues bringing a storage space back online, storage space is made out of 6 4tb WD Drives, all drives show as healthy in storage spaces, All drives pass smart test with WD utility. When clicking "Bring online" the only errors that show up in event viewer are related to the win 32 search service not responding then eventually timing out, then finally an NTFS error.
F:\ is the drive that is trying to come online, but the HardDiskVolume ID changes each time.
The storage space was working fine until I had tried to do a recursive takeown over the drive, which eventually failed due to write errors and now it will no longer come online.
I am not able to post a screenshot due to account verification but the only Warning that is showing in storage spaces is Low capacity, please add 3 drives but there is still 1tb of space left in the array.
Log Name: System
Source: NTFS
Date: 11/20/2017 11:12:06 AM
Event ID: 50
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
{Delayed Write Failed} Windows was unable to save all the data for the file . The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NTFS" />
<EventID Qualifiers="32772">50</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:12:06.091252800Z" />
<EventRecordID>2376</EventRecordID>
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>
</Data>
<Binary>04000400020030000000000032000480000000006E0200C0000000000000000000000000000000006E0200C0</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 11/20/2017 11:12:05 AM
Event ID: 140
Task Category: None
Level: Warning
Keywords: (8)
User: SYSTEM
Computer: DESKTOP-FOQ1217
Description:
The system failed to flush data to the transaction log. Corruption may occur in VolumeId: F:, DeviceName: \Device\HarddiskVolume18.
(A device which does not exist was specified.)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ntfs" Guid="{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000008</Keywords>
<TimeCreated SystemTime="2017-11-20T16:12:05.726789000Z" />
<EventRecordID>2375</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="7512" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="VolumeId">F:</Data>
<Data Name="DeviceName">\Device\HarddiskVolume18</Data>
<Data Name="Error">0xc000000e</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:11:34 AM
Event ID: 7046
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
The following service has repeatedly stopped responding to service control requests: Windows Search
Contact the service vendor or the system administrator about whether to disable this service until the problem is identified.
You may have to restart the computer in safe mode before you can disable the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="32768">7046</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:11:34.630883100Z" />
<EventRecordID>2374</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Search</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:11:04 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:11:04.630763100Z" />
<EventRecordID>2373</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 11/20/2017 11:07:15 AM
Event ID: 158
Task Category: None
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: DESKTOP-FOQ1217
Description:
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>158</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:07:15.203418600Z" />
<EventRecordID>2372</EventRecordID>
<Correlation />
<Execution ProcessID="18240" ThreadID="7236" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData Name="TMP_EVENT_TIMEPROV_INDICATED_UNSUPPORTED">
<Data Name="TimeProvider">VMICTimeProvider</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:06:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:06:00.517277000Z" />
<EventRecordID>2371</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="1868" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:05:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:05:30.516640600Z" />
<EventRecordID>2370</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:05:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:05:00.516502100Z" />
<EventRecordID>2369</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:04:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:04:30.516182600Z" />
<EventRecordID>2368</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3692" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:04:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:04:00.515286600Z" />
<EventRecordID>2367</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="1868" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:03:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:03:30.514870900Z" />
<EventRecordID>2366</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:03:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:03:00.514249700Z" />
<EventRecordID>2365</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:02:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:02:30.513431900Z" />
<EventRecordID>2364</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3752" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 11/20/2017 11:02:12 AM
Event ID: 104
Task Category: Log clear
Level: Information
Keywords:
User: DESKTOP-FOQ1217\initt
Computer: DESKTOP-FOQ1217
Description:
The System log file was cleared.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>104</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>104</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:02:12.957931800Z" />
<EventRecordID>2363</EventRecordID>
<Correlation />
<Execution ProcessID="1284" ThreadID="1428" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-21-4250576023-706491606-1612956541-1001" />
</System>
<UserData>
<LogFileCleared xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<SubjectUserName>initt</SubjectUserName>
<SubjectDomainName>DESKTOP-FOQ1217</SubjectDomainName>
<Channel>System</Channel>
<BackupPath>
</BackupPath>
</LogFileCleared>
</UserData>
</Event>
More...
F:\ is the drive that is trying to come online, but the HardDiskVolume ID changes each time.
The storage space was working fine until I had tried to do a recursive takeown over the drive, which eventually failed due to write errors and now it will no longer come online.
I am not able to post a screenshot due to account verification but the only Warning that is showing in storage spaces is Low capacity, please add 3 drives but there is still 1tb of space left in the array.
Log Name: System
Source: NTFS
Date: 11/20/2017 11:12:06 AM
Event ID: 50
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
{Delayed Write Failed} Windows was unable to save all the data for the file . The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NTFS" />
<EventID Qualifiers="32772">50</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:12:06.091252800Z" />
<EventRecordID>2376</EventRecordID>
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>
</Data>
<Binary>04000400020030000000000032000480000000006E0200C0000000000000000000000000000000006E0200C0</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 11/20/2017 11:12:05 AM
Event ID: 140
Task Category: None
Level: Warning
Keywords: (8)
User: SYSTEM
Computer: DESKTOP-FOQ1217
Description:
The system failed to flush data to the transaction log. Corruption may occur in VolumeId: F:, DeviceName: \Device\HarddiskVolume18.
(A device which does not exist was specified.)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ntfs" Guid="{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000008</Keywords>
<TimeCreated SystemTime="2017-11-20T16:12:05.726789000Z" />
<EventRecordID>2375</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="7512" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="VolumeId">F:</Data>
<Data Name="DeviceName">\Device\HarddiskVolume18</Data>
<Data Name="Error">0xc000000e</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:11:34 AM
Event ID: 7046
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
The following service has repeatedly stopped responding to service control requests: Windows Search
Contact the service vendor or the system administrator about whether to disable this service until the problem is identified.
You may have to restart the computer in safe mode before you can disable the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="32768">7046</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:11:34.630883100Z" />
<EventRecordID>2374</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Search</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:11:04 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:11:04.630763100Z" />
<EventRecordID>2373</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 11/20/2017 11:07:15 AM
Event ID: 158
Task Category: None
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: DESKTOP-FOQ1217
Description:
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>158</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:07:15.203418600Z" />
<EventRecordID>2372</EventRecordID>
<Correlation />
<Execution ProcessID="18240" ThreadID="7236" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData Name="TMP_EVENT_TIMEPROV_INDICATED_UNSUPPORTED">
<Data Name="TimeProvider">VMICTimeProvider</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:06:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:06:00.517277000Z" />
<EventRecordID>2371</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="1868" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:05:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:05:30.516640600Z" />
<EventRecordID>2370</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:05:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:05:00.516502100Z" />
<EventRecordID>2369</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:04:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:04:30.516182600Z" />
<EventRecordID>2368</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3692" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:04:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:04:00.515286600Z" />
<EventRecordID>2367</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="1868" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:03:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:03:30.514870900Z" />
<EventRecordID>2366</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3728" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:03:00 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:03:00.514249700Z" />
<EventRecordID>2365</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="824" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/20/2017 11:02:30 AM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-FOQ1217
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:02:30.513431900Z" />
<EventRecordID>2364</EventRecordID>
<Correlation />
<Execution ProcessID="744" ThreadID="3752" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">WSearch</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 11/20/2017 11:02:12 AM
Event ID: 104
Task Category: Log clear
Level: Information
Keywords:
User: DESKTOP-FOQ1217\initt
Computer: DESKTOP-FOQ1217
Description:
The System log file was cleared.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>104</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>104</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-11-20T16:02:12.957931800Z" />
<EventRecordID>2363</EventRecordID>
<Correlation />
<Execution ProcessID="1284" ThreadID="1428" />
<Channel>System</Channel>
<Computer>DESKTOP-FOQ1217</Computer>
<Security UserID="S-1-5-21-4250576023-706491606-1612956541-1001" />
</System>
<UserData>
<LogFileCleared xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<SubjectUserName>initt</SubjectUserName>
<SubjectDomainName>DESKTOP-FOQ1217</SubjectDomainName>
<Channel>System</Channel>
<BackupPath>
</BackupPath>
</LogFileCleared>
</UserData>
</Event>
More...