Troubleshooting Event ID 5120 on a Cluster Shared Volume

When managing a Cluster Shared Volume (CSV) in a Windows Server cluster environment, encountering errors can be frustrating, especially when they disrupt critical operations. Event ID 5120 is one such error that can arise, but fear not! In this blog post, we’ll explore the causes behind Event ID 5120 and provide a step-by-step troubleshooting guide to resolve it effectively. So let’s dive in!

Log Name:  System
Source:  Microsoft-Windows-FailoverClustering
Event ID:  5120
Task Category: Cluster Shared Volume
Level:  Error
Description:  Cluster Shared Volume 'VolumeName' ('ResourceName') is no longer available on this node because of 'STATUS_CLUSTER_CSV_AUTO_PAUSE_ERROR(c0130021)'. All I/O will temporarily be queued until a path to the volume is reestablished.

Understand Event ID 5120

Event ID 5120 is a specific error code generated in the Windows Event Viewer when there’s a problem accessing a Cluster Shared Volume. This error often occurs when permissions or security settings are misconfigured or when the CSV is unable to communicate with the underlying storage infrastructure. Resolving this issue requires a systematic approach to identify and address the underlying cause.

Verify Network Connectivity

First and foremost, ensure that the network connectivity between the cluster nodes and the storage subsystem is intact. Check for any network-related issues, such as disconnected cables, faulty switches, or misconfigured IP addresses. Use tools like ping or PowerShell cmdlets to verify connectivity between the cluster nodes and the storage devices.

Check CSV Permissions and Security Settings

Incorrect permissions or security settings on the Cluster Shared Volume can trigger Event ID 5120. Follow these steps to ensure proper permissions are in place:

a. Open the Failover Cluster Manager and navigate to the Storage section.

b. Right-click the affected CSV and select “Properties.”

c. In the Properties window, switch to the “Security” tab.

d. Verify that the appropriate user accounts or groups have the necessary permissions to access the CSV. At a minimum, the cluster nodes and the Cluster service account should have Full Control or Modify permissions.

Review Cluster Service Account Permissions

The Cluster service account, often named “Cluster Name$,” requires sufficient permissions to access the Cluster Shared Volume. Follow these steps to validate and adjust the Cluster service account permissions:

a. Open the Failover Cluster Manager.
b. Expand the “Services and Applications” node and select the “Services” tab.
c. Locate the Cluster service, right-click it, and choose “Properties.”
d. In the Properties window, switch to the “Log On” tab.
e. Ensure that the Cluster service account has appropriate rights to access the CSV. Consider adding the account to the local Administrators group on each node.

Analyze Event Viewer Logs

Event Viewer can provide valuable insights into the root cause of Event ID 5120. Examine the logs for related errors, warnings, or informational messages. Look for any event codes that might indicate permission issues, disk failures, or problems with the underlying storage infrastructure. Use this information to narrow down the troubleshooting process and identify the specific area of concern.

Update Windows Server and Drivers

Ensure that both the Windows Server operating system and the storage drivers are up to date. Outdated software or drivers can lead to compatibility issues, causing Event ID 5120. Check the Microsoft website and the manufacturer’s website for the latest updates, and install them following the recommended procedures.

Validate the CSV

The Cluster Shared Volume can be validated to ensure its integrity and functionality. The validation process helps identify any potential misconfigurations or inconsistencies. Follow these steps to validate the CSV:

a. Open the Failover Cluster Manager.

b. Expand the “Storage” section and select the “Disks” tab.

c. Right-click the affected CSV and choose “Validate This Cluster Shared Volume.

d. Follow the on-screen instructions and review the validation report for any errors or warnings.

Engage Vendor Support.

If the troubleshooting steps mentioned above do not resolve Event ID 5120, it’s recommended to reach out to the vendor’s support team. Provide them with detailed information about your cluster configuration, the steps you’ve taken, and any relevant error codes or log entries. The vendor support team will have the expertise to diagnose and address the issue effectively.

Conclusion

Resolving Event ID 5120 on a Cluster Shared Volume can be a complex task, but by following the steps outlined in this guide, you can troubleshoot the issue systematically. Remember to verify network connectivity, check CSV permissions and security settings, review Cluster service account permissions, analyze Event Viewer logs, update Windows Server and drivers, validate the CSV, and engage vendor support if necessary. With patience and persistence, you’ll be able to overcome Event ID 5120 and ensure smooth operations within your Windows Server cluster environment.

Remember to document your troubleshooting steps and the solution for future reference, which can save time and effort if you encounter similar issues down the road.

Ashutosh Dixit

I am currently working as a Senior Technical Support Engineer with VMware Premier Services for Telco. Before this, I worked as a Technical Lead with Microsoft Enterprise Platform Support for Production and Premier Support. I am an expert in High-Availability, Deployments, and VMware Core technology along with Tanzu and Horizon.

Leave a Reply