├── LICENSE ├── PrivateCloud.DiagnosticInfo ├── PrivateCloud.DiagnosticInfo.psd1 └── PrivateCloud.DiagnosticInfo.psm1 └── README.md /LICENSE: -------------------------------------------------------------------------------- 1 | The MIT License (MIT) 2 | 3 | Copyright (c) 2016 PowerShell Team 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /PrivateCloud.DiagnosticInfo/PrivateCloud.DiagnosticInfo.psd1: -------------------------------------------------------------------------------- 1 | # 2 | # Module manifest for module 'PrivateCloud.DiagnosticInfo' 3 | # 4 | # Generated on: 4/25/2016 5 | # 6 | 7 | @{ 8 | 9 | # Script module or binary module file associated with this manifest. 10 | RootModule = 'PrivateCloud.DiagnosticInfo.psm1' 11 | 12 | # Version number of this module. 13 | ModuleVersion = '1.1.38' 14 | 15 | # ID used to uniquely identify this module 16 | GUID = '7e0bc824-c371-4936-98e6-b7216ba5f348' 17 | 18 | # Author of this module 19 | Author = 'Microsoft Corporation' 20 | 21 | # Company or vendor of this module 22 | CompanyName = 'Microsoft Corporation' 23 | 24 | # Copyright statement for this module 25 | Copyright = '(c) 2016 Microsoft Corporation. All rights reserved.' 26 | 27 | # Description of the functionality provided by this module 28 | Description = 'Evaluates and Reports Windows Server Software Defined Data Center (SDDC) and Hyper-Converged Infrastrucure (HCI) Health' 29 | 30 | # Minimum version of the Windows PowerShell engine required by this module 31 | # PowerShellVersion = '' 32 | 33 | # Name of the Windows PowerShell host required by this module 34 | # PowerShellHostName = '' 35 | 36 | # Minimum version of the Windows PowerShell host required by this module 37 | # PowerShellHostVersion = '' 38 | 39 | # Minimum version of Microsoft .NET Framework required by this module 40 | # DotNetFrameworkVersion = '' 41 | 42 | # Minimum version of the common language runtime (CLR) required by this module 43 | # CLRVersion = '' 44 | 45 | # Processor architecture (None, X86, Amd64) required by this module 46 | # ProcessorArchitecture = '' 47 | 48 | # Modules that must be imported into the global environment prior to importing this module 49 | RequiredModules = @() 50 | 51 | # Assemblies that must be loaded prior to importing this module 52 | # RequiredAssemblies = @() 53 | 54 | # Script files (.ps1) that are run in the caller's environment prior to importing this module. 55 | # ScriptsToProcess = @() 56 | 57 | # Type files (.ps1xml) to be loaded when importing this module 58 | # TypesToProcess = @() 59 | 60 | # Format files (.ps1xml) to be loaded when importing this module 61 | # FormatsToProcess = @() 62 | 63 | # Modules to import as nested modules of the module specified in RootModule/ModuleToProcess 64 | # NestedModules = @() 65 | 66 | # Functions to export from this module 67 | FunctionsToExport = 'Get-SddcDiagnosticInfo', 68 | 'Show-SddcDiagnosticReport', 69 | 'Show-SddcDiagnosticStorageLatencyReport', 70 | 'Install-SddcDiagnosticModule', 71 | 'Confirm-SddcDiagnosticModule', 72 | 'Register-SddcDiagnosticArchiveJob', 73 | 'Unregister-SddcDiagnosticArchiveJob', 74 | 'Update-SddcDiagnosticArchive', 75 | 'Show-StorageCounters', 76 | 'Get-SpacesTimeline', 77 | 'Limit-SddcDiagnosticArchive', 78 | 'Show-SddcDiagnosticArchiveJob', 79 | 'Set-SddcDiagnosticArchiveJobParameters', 80 | 'Get-SddcDiagnosticArchiveJobParameters' 81 | 82 | # Cmdlets to export from this module 83 | # CmdletsToExport = @() 84 | 85 | # Variables to export from this module 86 | # VariablesToExport = '' 87 | 88 | # Aliases to export from this module 89 | AliasesToExport = 'gsddcdi', 90 | 'Get-PCStorageDiagnosticInfo', 91 | 'getpcsdi', 92 | 'Get-PCStorageReport' 93 | 94 | # List of all modules packaged with this module 95 | # ModuleList = @() 96 | 97 | # List of all files packaged with this module 98 | # FileList = @() 99 | 100 | # Private data to pass to the module specified in RootModule/ModuleToProcess 101 | # PrivateData = '' 102 | 103 | # HelpInfo URI of this module 104 | # HelpInfoURI = '' 105 | 106 | # Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix. 107 | # DefaultCommandPrefix = '' 108 | 109 | } -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | PrivateCloud.DiagnosticInfo 2 | =========================== 3 | # Overview 4 | This module contains the comprehensive diagnostic information gatherer for Microsoft Software Defined Datacenter solutions. It assumes deployment with compute and/or storage clusters running Windows Server 2016 or newer. The module has the diagnostic commands Get-SDDCDiagnosticInfo (previously Get-PCStorageDiagnosticInfo), which gathers triage payload, and Show-SDDCDiagnosticReport, which provides a number of reports & health checks for Failover Clustering (Cluster, Resources, Networks, Nodes), Storage and Storage Spaces Direct (Physical Disks, Enclosures, Virtual Disks), Cluster Shared Volumes, SMB File Shares, and Deduplication. Sources available at GitHub ( http://github.com/Powershell/PrivateCloud.DiagnosticInfo) and download available via Powershell Gallery at (https://www.powershellgallery.com/packages/PrivateCloud.DiagnosticInfo) 5 | 6 | The Get-SDDCDiagnosticInfo command in this module includes several sections, including: 7 | 1. Gathering of cluster, cluster Health service and event logs from all cluster nodes to a ZIP archive 8 | 2. Reporting of Storage Health, plus details on unhealthy components. 9 | 3. Reporting of Storage Capacity by Pool, Volume and Deduplicated volumes. 10 | 4. Reporting of Storage Performance with IOPS and Latency per Volume 11 | 12 | By default the ZIP archive will be created at $env:USERPROFILE\HealthTest--.ZIP. A temporary folder "HealthTest" will be used at the same location during the gathering process. 13 | ## What to expect next? 14 | A lot of improvements and new cmdlets to analyze SDDC system health. 15 | Provide feedback on what you'd like to see. 16 | 17 | ## To install module from PowerShell gallery 18 | Powershell gallery: https://www.powershellgallery.com/packages/PrivateCloud.DiagnosticInfo 19 | Note: Installing items from the Gallery requires the latest version of the PowerShellGet module, which is available in Windows 10. Installation will generally require administrative privileges. 20 | 21 | ``` PowerShell 22 | Install-PackageProvider PowerShellGet 23 | ``` 24 | Install the module by running following command in PowerShell 25 | ``` PowerShell 26 | Install-Module PrivateCloud.DiagnosticInfo 27 | ``` 28 | Update the module by running following command in PowerShell 29 | ``` PowerShell 30 | Update-Module PrivateCloud.DiagnosticInfo 31 | ``` 32 | ## To install module from GitHub 33 | Download the latest module from github - https://github.com/PowerShell/PrivateCloud.DiagnosticInfo/archive/master.zip and extract directory PrivateCloud.DiagnosticInfo to the correct powershell modules path pointed by $env:PSModulePath 34 | 35 | **Note**: this is generally deprecated unless you are working directly with Microsoft engineering. For normal usage please acquire the module from the Powershell Gallery. 36 | 37 | ``` PowerShell 38 | # Allow Tls12 and Tls11 -- GitHub now requires Tls12 39 | # If this is not set, the Invoke-WebRequest fails with "The request was aborted: Could not create SSL/TLS secure channel." 40 | [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 -bor [Net.SecurityProtocolType]::Tls11 41 | 42 | $module = 'PrivateCloud.DiagnosticInfo'; $branch = 'master' 43 | Invoke-WebRequest -Uri https://github.com/PowerShell/$module/archive/$branch.zip -OutFile $env:TEMP\$branch.zip 44 | Expand-Archive -Path $env:TEMP\$branch.zip -DestinationPath $env:TEMP -Force 45 | if (Test-Path $env:SystemRoot\System32\WindowsPowerShell\v1.0\Modules\$module) { 46 | rm -Recurse $env:SystemRoot\System32\WindowsPowerShell\v1.0\Modules\$module -ErrorAction Stop 47 | Remove-Module $module -ErrorAction SilentlyContinue 48 | } else { 49 | Import-Module $module -ErrorAction SilentlyContinue 50 | } 51 | if (-not ($m = Get-Module $module -ErrorAction SilentlyContinue)) { 52 | $md = "$env:ProgramFiles\WindowsPowerShell\Modules" 53 | } else { 54 | $md = (gi $m.ModuleBase -ErrorAction SilentlyContinue).PsParentPath 55 | Remove-Module $module -ErrorAction SilentlyContinue 56 | rm -Recurse $m.ModuleBase -ErrorAction Stop 57 | } 58 | cp -Recurse $env:TEMP\$module-$branch\$module $md -Force -ErrorAction Stop 59 | rm -Recurse $env:TEMP\$module-$branch,$env:TEMP\$branch.zip 60 | Import-Module $module -Force 61 | Get-Command -Module PrivateCloud.DiagnosticInfo 62 | Get-Help Get-SDDCDiagnosticInfo 63 | ``` 64 | # Examples 65 | ## To execute on the cluster the current node is a member of 66 | ``` PowerShell 67 | Get-SDDCDiagnosticInfo 68 | ``` 69 | ## To execute against a remote cluster 70 | ``` PowerShell 71 | Get-SDDCDiagnosticInfo -ClusterName CLUS01 72 | ``` 73 | ## To specify a folder for temporary content during gather 74 | ``` PowerShell 75 | Get-SDDCDiagnosticInfo -WriteToPath D:\Folder 76 | ``` 77 | ## To specify where to create the gathered ZIP 78 | ``` PowerShell 79 | Get-SDDCDiagnosticInfo -ZipPrefix D:\MyHealth 80 | ``` 81 | The ZIP will be placed at --.ZIP 82 | 83 | This example would result in a form like: D:\MyHealth-MyCluster-20180615-1256.ZIP 84 | ## To review the summary report from previously gathered results 85 | ``` PowerShell 86 | Get-SDDCDiagnosticInfo -ReadFromPath D:\HealthTest-MyCluster-20180615-1232.ZIP 87 | ``` 88 | or equivalently 89 | ``` PowerShell 90 | Show-SDDCDiagnosticReport -Report Summary D:\HealthTest-MyCluster-20180615-1232.ZIP 91 | ``` 92 | The summary report generated at the time of gather is at 0_CloudHealthSummary.log in the ZIP. The commands above re-generate the report based on the currently installed PrivateCloud.DiagnosticInfo module - if newer, additional reporting may be available. 93 | ## To review all of the available reports 94 | ``` PowerShell 95 | Show-SddcDiagnosticReport D:\HealthTest-MyCluster-20180615-1232.ZIP 96 | ``` 97 | # What does the gather include by default? 98 | Transcripts of the gather process and its summary report. 99 | - 0_CloudHealthGatherTranscript.log 100 | - 0_CloudHealthSummary.log 101 | 102 | ## Whole-cluster data 103 | Whole-cluster data as Powershell object XML export files (Import-Clixml) 104 | - GetCluster.XML : **Get-Cluster** 105 | - GetClusterGroup.XML : **Get-ClusterGroup** 106 | - GetClusterNetwork.XML : **Get-ClusterNetwork** 107 | - GetClusterNode.XML : **Get-ClusterNode** 108 | - GetClusterResource.XML : **Get-ClusterResource** 109 | - GetClusterResourceParameters.XML : **Get-ClusterResource** | **Get-ClusterParameter** 110 | - GetClusterSharedVolume.XML : **Get-ClusterSharedVolume** 111 | - GetParameters.XML : Parameters provided to **Get-SDDCDiagnosticInfo** 112 | - GetPhysicalDisk.XML : **Get-PhysicalDisk** at the StorageSubsystem 113 | - GetPhysicalDiskSNV.XML : **Get-PhysicalDiskSNV** at the StorageSubsystem 114 | - GetPhysicalDisk_Pool.xml : **Get-PhysicalDisk** at the StoragePool 115 | - GetSmbOpenFile.XML : **Get-SMBOpenFile** 116 | - GetSmbWitness.XML : **Get-SMBWitnessClient** 117 | - GetStorageEnclosure.XML : **Get-StoragEnclosure** at the StorageSubsystem 118 | - GetStorageFaultDomain_SSU.xml : **Get-StorageFaultDomain** at the StorageSubsystem, for StorageScaleUnits 119 | - GetStorageJob.XML : **Get-StorageJob** 120 | - GetStoragePool.XML : **Get-StoragePool** at the StorageSubsystem, all non-primordial 121 | - GetStorageSubsystem.XML : **Get-StorageSubsystem** for the clustered StorageSubsystem 122 | - GetStorageTier.XML : **Get-StorageTier** 123 | - GetVirtualDisk.XML : **Get-VirtualDisk** at the StorageSubsystem 124 | - GetVolume.XML : **Get-Volume** at the StorageSubsystem 125 | - ShareStatus.XML : **Get-SMBShare** with a 'Health' parameter added indicating accessibility at time of capture 126 | 127 | ### If de-duplication was present 128 | 129 | - GetDedupVolume.XML : **Get-DedupStatus** 130 | 131 | ### If the clustered storage subsystem was not healthy 132 | 133 | - DebugStorageSubsystem.XML : **Debug-StorageSubsystem** at the StorageSubsystem 134 | 135 | ### Performance counters 136 | 137 | - GetCounters.blg 138 | 139 | ### Cluster & Health logs 140 | - NodeName.FQDN_cluster.log : **Get-ClusterLog** 141 | - NodeName.FQDN_health.log : **Get-ClusterLog** -Health 142 | 143 | ### If the Sddc Diagnostic Archive was active 144 | 145 | - SddcDiagnosticArchiveJob.txt : **Show-SddcDiagnosticArchiveJob** 146 | - SddcDiagnosticArchiveJobWarn.txt : any WARNINGs from **Show-SddcDiagnosticArchiveJob** 147 | 148 | ## Per node 149 | 150 | Per-node data as Powershell object XML export files (Import-Clixml) 151 | 152 | - ClusBflt.xml : **Get-CimInstance** -Namespace root\wmi -ClassName **ClusBfltDeviceInformation** (S2D Cache/Target) 153 | - ClusPort.xml : **Get-CimInstance** -Namespace root\wmi -ClassName **ClusPortDeviceInformation** (S2D Client) 154 | - GetDrivers.XML : **Get-CimInstance** -ClassName Win32_PnPSignedDriver 155 | 156 | As XML and text 157 | 158 | - GetHotFix.xml : **Get-HotFix** 159 | - GetScheduledTask.xml : **Get-ScheduledTask** 160 | - GetSmbServerNetworkInterface.xml : **Get-SmbServerNetworkInterface** 161 | 162 | Network focused, as XML and text 163 | 164 | - GetNetAdapter.xml : **Get-NetAdapter** 165 | - GetNetAdapterAdvancedProperty.xml : **Get-NetAdapterAdvancedProperty** 166 | - GetNetAdapterBinding.xml : **Get-NetAdapterBinding** 167 | - GetNetAdapterChecksumOffload.xml : **Get-NetAdapterChecksumOffload** 168 | - GetNetAdapterIPsecOffload.xml : **Get-NetAdapterIPsecOffload** 169 | - GetNetAdapterLso.xml : **Get-NetAdapterLso** 170 | - GetNetAdapterPacketDirect.xml : **Get-NetAdapterPacketDirect** 171 | - GetNetAdapterRdma.xml : **Get-NetAdapterRdma** 172 | - GetNetAdapterRsc.xml : **GetNetAdapterRsc** 173 | - GetNetIpAddress.xml : **Get-NetIpAddress** 174 | - GetNetAdapterRss.xml : **GetNetAdapterRss** 175 | - GetNetIPv4Protocol.xml : **Get-NetIPv4Protocol** 176 | - GetNetIPv6Protocol.xml : **Get-NetIPv6Protocol** 177 | - GetNetLbfoTeam.xml : **Get-NetLbfoTeam** 178 | - GetNetLbfoTeamMember.xml : **Get-NetLbfoTeamMember** 179 | - GetNetLbfoTeamNic.xml : **Get-NetLbfoTeamNic** 180 | - GetNetOffloadGlobalSetting.xml : **Get-NetOffloadGlobalSetting** 181 | - GetNetPrefixPolicy.xml : **Get-NetPrefixPolicy** 182 | - GetNetQosPolicy.xml : **Get-NetQosPolicy** 183 | - GetNetRoute.xml : **Get-NetRoute** 184 | - GetNetTCPConnection.xml : **Get-NetTcpConnection** 185 | - GetNetTcpSetting.xml **Get-NetTcpSetting** 186 | 187 | ### System Information (SystemInfo.exe) 188 | - SystemInfo.txt 189 | 190 | ### System verifier configuration 191 | - verifier-query.txt : **verifer** /query 192 | - verifier-querysettings.txt : **verifier** /querysettings 193 | 194 | ### Event Logs 195 | Application and System events: 196 | - Application.EVTX 197 | - System.EVTX 198 | 199 | All event channels prefixed with the following: 200 | 201 | - Microsoft-Windows-ClusterAwareUpdating 202 | - Microsoft-Windows-DataIntegrityScan 203 | - Microsoft-Windows-FailoverClustering 204 | - Microsoft-Windows-HostGuardian 205 | - Microsoft-Windows-Hyper-V 206 | - Microsoft-Windows-Kernel 207 | - Microsoft-Windows-NDIS 208 | - Microsoft-Windows-Network 209 | - Microsoft-Windows-NTFS 210 | - Microsoft-Windows-REFS 211 | - Microsoft-Windows-ResumeKeyFilter 212 | - Microsoft-Windows-SMB 213 | - Microsoft-Windows-Storage 214 | - Microsoft-Windows-TCPIP 215 | - Microsoft-Windows-VHDMP 216 | - Microsoft-Windows-WMI-Activity 217 | 218 | Certain channels may be excluded for size and value considerations. At this time, that includes: 219 | 220 | - Microsoft-Windows-FailoverClustering/Diagnostic 221 | - Microsoft-Windows-FailoverClustering/DiagnosticVerbose 222 | - Microsoft-Windows-FailoverClustering-Client/Diagnostic 223 | - Microsoft-Windows-StorageSpaces-Driver/Performance 224 | 225 | On Windows Server 2016, this results in the following being captured. Note that if event channels are 226 | added which match the criteria above, they will be automatically added to the capture. 227 | 228 | - Microsoft-Windows-ClusterAwareUpdating-Admin.EVTX 229 | - Microsoft-Windows-ClusterAwareUpdating-Debug.EVTX 230 | - Microsoft-Windows-ClusterAwareUpdating-Management-Admin.EVTX 231 | - Microsoft-Windows-DataIntegrityScan-Admin.EVTX 232 | - Microsoft-Windows-DataIntegrityScan-CrashRecovery.EVTX 233 | - Microsoft-Windows-FailoverClustering-ClusBflt-Diagnostic.EVTX 234 | - Microsoft-Windows-FailoverClustering-ClusBflt-Management.EVTX 235 | - Microsoft-Windows-FailoverClustering-ClusBflt-Operational.EVTX 236 | - Microsoft-Windows-FailoverClustering-Clusport-Diagnostic.EVTX 237 | - Microsoft-Windows-FailoverClustering-Clusport-Operational.EVTX 238 | - Microsoft-Windows-FailoverClustering-CsvFlt-Diagnostic.EVTX 239 | - Microsoft-Windows-FailoverClustering-CsvFs-Diagnostic.EVTX 240 | - Microsoft-Windows-FailoverClustering-CsvFs-Operational.EVTX 241 | - Microsoft-Windows-FailoverClustering-Manager-Admin.EVTX 242 | - Microsoft-Windows-FailoverClustering-Manager-Diagnostic.EVTX 243 | - Microsoft-Windows-FailoverClustering-Manager-Tracing.EVTX 244 | - Microsoft-Windows-FailoverClustering-NetFt-Diagnostic.EVTX 245 | - Microsoft-Windows-FailoverClustering-NetFt-Operational.EVTX 246 | - Microsoft-Windows-FailoverClustering-Operational.EVTX 247 | - Microsoft-Windows-FailoverClustering-Performance-CSV.EVTX 248 | - Microsoft-Windows-FailoverClustering-WMIProvider-Admin.EVTX 249 | - Microsoft-Windows-FailoverClustering-WMIProvider-Diagnostic.EVTX 250 | - Microsoft-Windows-HostGuardianService-Client-Admin.EVTX 251 | - Microsoft-Windows-HostGuardianService-Client-Analytic.EVTX 252 | - Microsoft-Windows-HostGuardianService-Client-Debug.EVTX 253 | - Microsoft-Windows-HostGuardianService-Client-Operational.EVTX 254 | - Microsoft-Windows-Hyper-V-Compute-Admin.EVTX 255 | - Microsoft-Windows-Hyper-V-Compute-Analytic.EVTX 256 | - Microsoft-Windows-Hyper-V-Compute-Operational.EVTX 257 | - Microsoft-Windows-Hyper-V-Config-Admin.EVTX 258 | - Microsoft-Windows-Hyper-V-Config-Analytic.EVTX 259 | - Microsoft-Windows-Hyper-V-Config-Operational.EVTX 260 | - Microsoft-Windows-Hyper-V-Guest-Drivers-Admin.EVTX 261 | - Microsoft-Windows-Hyper-V-Guest-Drivers-Analytic.EVTX 262 | - Microsoft-Windows-Hyper-V-Guest-Drivers-Debug.EVTX 263 | - Microsoft-Windows-Hyper-V-Guest-Drivers-Diagnose.EVTX 264 | - Microsoft-Windows-Hyper-V-Guest-Drivers-Operational.EVTX 265 | - Microsoft-Windows-Hyper-V-High-Availability-Admin.EVTX 266 | - Microsoft-Windows-Hyper-V-High-Availability-Analytic.EVTX 267 | - Microsoft-Windows-Hyper-V-Hypervisor-Admin.EVTX 268 | - Microsoft-Windows-Hyper-V-Hypervisor-Analytic.EVTX 269 | - Microsoft-Windows-Hyper-V-Hypervisor-Operational.EVTX 270 | - Microsoft-Windows-Hyper-V-NETVSC-Diagnostic.EVTX 271 | - Microsoft-Windows-Hyper-V-Shared-VHDX-Diagnostic.EVTX 272 | - Microsoft-Windows-Hyper-V-Shared-VHDX-Operational.EVTX 273 | - Microsoft-Windows-Hyper-V-Shared-VHDX-Reservation.EVTX 274 | - Microsoft-Windows-Hyper-V-StorageVSP-Admin.EVTX 275 | - Microsoft-Windows-Hyper-V-VfpExt-Analytic.EVTX 276 | - Microsoft-Windows-Hyper-V-VID-Admin.EVTX 277 | - Microsoft-Windows-Hyper-V-VID-Analytic.EVTX 278 | - Microsoft-Windows-Hyper-V-VMMS-Admin.EVTX 279 | - Microsoft-Windows-Hyper-V-VMMS-Analytic.EVTX 280 | - Microsoft-Windows-Hyper-V-VMMS-Networking.EVTX 281 | - Microsoft-Windows-Hyper-V-VMMS-Operational.EVTX 282 | - Microsoft-Windows-Hyper-V-VMMS-Storage.EVTX 283 | - Microsoft-Windows-Hyper-V-VMSP-Debug.EVTX 284 | - Microsoft-Windows-Hyper-V-VmSwitch-Diagnostic.EVTX 285 | - Microsoft-Windows-Hyper-V-VmSwitch-Operational.EVTX 286 | - Microsoft-Windows-Hyper-V-Worker-Admin.EVTX 287 | - Microsoft-Windows-Hyper-V-Worker-Analytic.EVTX 288 | - Microsoft-Windows-Hyper-V-Worker-VDev-Analytic.EVTX 289 | - Microsoft-Windows-Kernel-Acpi-Diagnostic.EVTX 290 | - Microsoft-Windows-Kernel-AppCompat-General.EVTX 291 | - Microsoft-Windows-Kernel-AppCompat-Performance.EVTX 292 | - Microsoft-Windows-Kernel-ApphelpCache-Analytic.EVTX 293 | - Microsoft-Windows-Kernel-ApphelpCache-Debug.EVTX 294 | - Microsoft-Windows-Kernel-ApphelpCache-Operational.EVTX 295 | - Microsoft-Windows-Kernel-Boot-Analytic.EVTX 296 | - Microsoft-Windows-Kernel-Boot-Operational.EVTX 297 | - Microsoft-Windows-Kernel-BootDiagnostics-Diagnostic.EVTX 298 | - Microsoft-Windows-Kernel-Disk-Analytic.EVTX 299 | - Microsoft-Windows-Kernel-EventTracing-Admin.EVTX 300 | - Microsoft-Windows-Kernel-EventTracing-Analytic.EVTX 301 | - Microsoft-Windows-Kernel-File-Analytic.EVTX 302 | - Microsoft-Windows-Kernel-Interrupt-Steering-Diagnostic.EVTX 303 | - Microsoft-Windows-Kernel-IO-Operational.EVTX 304 | - Microsoft-Windows-Kernel-LiveDump-Analytic.EVTX 305 | - Microsoft-Windows-Kernel-Memory-Analytic.EVTX 306 | - Microsoft-Windows-Kernel-Network-Analytic.EVTX 307 | - Microsoft-Windows-Kernel-Pdc-Diagnostic.EVTX 308 | - Microsoft-Windows-Kernel-Pep-Diagnostic.EVTX 309 | - Microsoft-Windows-Kernel-PnP-Boot Diagnostic.EVTX 310 | - Microsoft-Windows-Kernel-PnP-Configuration Diagnostic.EVTX 311 | - Microsoft-Windows-Kernel-PnP-Configuration.EVTX 312 | - Microsoft-Windows-Kernel-PnP-Device Enumeration Diagnostic.EVTX 313 | - Microsoft-Windows-Kernel-PnP-Driver Diagnostic.EVTX 314 | - Microsoft-Windows-Kernel-Power-Diagnostic.EVTX 315 | - Microsoft-Windows-Kernel-Power-Thermal-Diagnostic.EVTX 316 | - Microsoft-Windows-Kernel-Power-Thermal-Operational.EVTX 317 | - Microsoft-Windows-Kernel-Prefetch-Diagnostic.EVTX 318 | - Microsoft-Windows-Kernel-Process-Analytic.EVTX 319 | - Microsoft-Windows-Kernel-Processor-Power-Diagnostic.EVTX 320 | - Microsoft-Windows-Kernel-Registry-Analytic.EVTX 321 | - Microsoft-Windows-Kernel-Registry-Performance.EVTX 322 | - Microsoft-Windows-Kernel-ShimEngine-Debug.EVTX 323 | - Microsoft-Windows-Kernel-ShimEngine-Diagnostic.EVTX 324 | - Microsoft-Windows-Kernel-ShimEngine-Operational.EVTX 325 | - Microsoft-Windows-Kernel-StoreMgr-Analytic.EVTX 326 | - Microsoft-Windows-Kernel-StoreMgr-Operational.EVTX 327 | - Microsoft-Windows-Kernel-WDI-Analytic.EVTX 328 | - Microsoft-Windows-Kernel-WDI-Debug.EVTX 329 | - Microsoft-Windows-Kernel-WDI-Operational.EVTX 330 | - Microsoft-Windows-Kernel-WHEA-Errors.EVTX 331 | - Microsoft-Windows-Kernel-WHEA-Operational.EVTX 332 | - Microsoft-Windows-Kernel-XDV-Analytic.EVTX 333 | - Microsoft-Windows-NDIS-Diagnostic.EVTX 334 | - Microsoft-Windows-NDIS-Operational.EVTX 335 | - Microsoft-Windows-NDIS-PacketCapture-Diagnostic.EVTX 336 | - Microsoft-Windows-NdisImPlatform-Operational.EVTX 337 | - Microsoft-Windows-Network-and-Sharing-Center-Diagnostic.EVTX 338 | - Microsoft-Windows-Network-Connection-Broker.EVTX 339 | - Microsoft-Windows-Network-DataUsage-Analytic.EVTX 340 | - Microsoft-Windows-Network-Setup-Diagnostic.EVTX 341 | - Microsoft-Windows-NetworkBridge-Diagnostic.EVTX 342 | - Microsoft-Windows-NetworkController-NcHostAgent-Admin.EVTX 343 | - Microsoft-Windows-Networking-Correlation-Diagnostic.EVTX 344 | - Microsoft-Windows-Networking-RealTimeCommunication-Tracing.EVTX 345 | - Microsoft-Windows-NetworkLocationWizard-Operational.EVTX 346 | - Microsoft-Windows-NetworkProfile-Diagnostic.EVTX 347 | - Microsoft-Windows-NetworkProfile-Operational.EVTX 348 | - Microsoft-Windows-NetworkProvider-Operational.EVTX 349 | - Microsoft-Windows-NetworkSecurity-Debug.EVTX 350 | - Microsoft-Windows-NetworkStatus-Analytic.EVTX 351 | - Microsoft-Windows-Ntfs-Operational.EVTX 352 | - Microsoft-Windows-Ntfs-Performance.EVTX 353 | - Microsoft-Windows-Ntfs-WHC.EVTX 354 | - Microsoft-Windows-ReFS-Operational.EVTX 355 | - Microsoft-Windows-ResumeKeyFilter-Analytic.EVTX 356 | - Microsoft-Windows-ResumeKeyFilter-Operational.EVTX 357 | - Microsoft-Windows-ResumeKeyFilter-Performance.EVTX 358 | - Microsoft-Windows-SMBClient-Analytic.EVTX 359 | - Microsoft-Windows-SmbClient-Connectivity.EVTX 360 | - Microsoft-Windows-SmbClient-Diagnostic.EVTX 361 | - Microsoft-Windows-SMBClient-HelperClassDiagnostic.EVTX 362 | - Microsoft-Windows-SMBClient-ObjectStateDiagnostic.EVTX 363 | - Microsoft-Windows-SMBClient-Operational.EVTX 364 | - Microsoft-Windows-SmbClient-Security.EVTX 365 | - Microsoft-Windows-SMBDirect-Admin.EVTX 366 | - Microsoft-Windows-SMBDirect-Debug.EVTX 367 | - Microsoft-Windows-SMBDirect-Netmon.EVTX 368 | - Microsoft-Windows-SMBServer-Analytic.EVTX 369 | - Microsoft-Windows-SMBServer-Audit.EVTX 370 | - Microsoft-Windows-SMBServer-Connectivity.EVTX 371 | - Microsoft-Windows-SMBServer-Diagnostic.EVTX 372 | - Microsoft-Windows-SMBServer-Operational.EVTX 373 | - Microsoft-Windows-SMBServer-Performance.EVTX 374 | - Microsoft-Windows-SMBServer-Security.EVTX 375 | - Microsoft-Windows-SMBWitnessClient-Admin.EVTX 376 | - Microsoft-Windows-SMBWitnessClient-Informational.EVTX 377 | - Microsoft-Windows-SMBWitnessServer-Admin.EVTX 378 | - Microsoft-Windows-Storage-ATAPort-Admin.EVTX 379 | - Microsoft-Windows-Storage-ATAPort-Analytic.EVTX 380 | - Microsoft-Windows-Storage-ATAPort-Debug.EVTX 381 | - Microsoft-Windows-Storage-ATAPort-Diagnose.EVTX 382 | - Microsoft-Windows-Storage-ATAPort-Operational.EVTX 383 | - Microsoft-Windows-Storage-ClassPnP-Admin.EVTX 384 | - Microsoft-Windows-Storage-ClassPnP-Analytic.EVTX 385 | - Microsoft-Windows-Storage-ClassPnP-Debug.EVTX 386 | - Microsoft-Windows-Storage-ClassPnP-Diagnose.EVTX 387 | - Microsoft-Windows-Storage-ClassPnP-Operational.EVTX 388 | - Microsoft-Windows-Storage-Disk-Admin.EVTX 389 | - Microsoft-Windows-Storage-Disk-Analytic.EVTX 390 | - Microsoft-Windows-Storage-Disk-Debug.EVTX 391 | - Microsoft-Windows-Storage-Disk-Diagnose.EVTX 392 | - Microsoft-Windows-Storage-Disk-Operational.EVTX 393 | - Microsoft-Windows-Storage-Storport-Admin.EVTX 394 | - Microsoft-Windows-Storage-Storport-Analytic.EVTX 395 | - Microsoft-Windows-Storage-Storport-Debug.EVTX 396 | - Microsoft-Windows-Storage-Storport-Diagnose.EVTX 397 | - Microsoft-Windows-Storage-Storport-Operational.EVTX 398 | - Microsoft-Windows-Storage-Tiering-Admin.EVTX 399 | - Microsoft-Windows-Storage-Tiering-IoHeat-Heat.EVTX 400 | - Microsoft-Windows-StorageManagement-Debug.EVTX 401 | - Microsoft-Windows-StorageManagement-Operational.EVTX 402 | - Microsoft-Windows-StorageSpaces-Driver-Diagnostic.EVTX 403 | - Microsoft-Windows-StorageSpaces-Driver-Operational.EVTX 404 | - Microsoft-Windows-StorageSpaces-ManagementAgent-WHC.EVTX 405 | - Microsoft-Windows-StorageSpaces-SpaceManager-Diagnostic.EVTX 406 | - Microsoft-Windows-StorageSpaces-SpaceManager-Operational.EVTX 407 | - Microsoft-Windows-TCPIP-Diagnostic.EVTX 408 | - Microsoft-Windows-TCPIP-Operational.EVTX 409 | - Microsoft-Windows-VHDMP-Analytic.EVTX 410 | - Microsoft-Windows-VHDMP-Operational.EVTX 411 | - Microsoft-Windows-WMI-Activity-Debug.EVTX 412 | - Microsoft-Windows-WMI-Activity-Operational.EVTX 413 | - Microsoft-Windows-WMI-Activity-Trace.EVTX 414 | 415 | ### Additional captures in per-node subdirectories 416 | 417 | The following subdirectories will appear per-node, containing additional captures. 418 | 419 | - ClusterReports : all content at $env:SystemRoot\Cluster\Reports (validation reports, et.al.) 420 | - LocaleMetaData : event log archive metadata for formatting event messages in the captured EVTX (wevtutil archive-log) 421 | - SddcDiagnosticArchive : the Sddc Diagnostic Archive for the node 422 | 423 | ### Sddc Diagnostic Archive 424 | 425 | The Sddc Diagnostic Archive is a series of timestamped ZIP containing a per-day snapshot of event, cluster and health logs. The event logs are the same as those mentioned previously. 426 | 427 | - **Install-SddcDiagnosticModule** : install the Sddc Diagnostic Archive module (PrivateCloud.DiagnosticInfo) on a cluster/node 428 | - **Confirm-SddcDiagnosticModule** : confirm (check) the status of the module on a cluster/node 429 | - **Register-SddcDiagnosticArchiveJob** : register (start) the archive job for a cluster 430 | - **Show-SddcDiagnosticArchiveJob** : show the state of the archive job for a cluster (module state, sizes) 431 | - **Unregister-SddcDiagnosticArchiveJob** : unregister (remove/stop) the archive job for a cluster 432 | - **Set-SddcDiagnosticArchiveJobParameters** : adjust garbage collection parameters for the diagnostic archive (days of, size, path) 433 | 434 | See individual per-command help for more details. 435 | --------------------------------------------------------------------------------