Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Tuesday, November 20, 2018 9:12 AM
Hi all,
Filter Manager failed to attach to volume \Device\HarddiskVolume58. This volume will be unavailable for filtering until a reboot. The final status was 0xc03a001c.
The error appears every time you back up. OS is the Windows Server 2016 standard. Can you tell me why these errors arise and how do I remove them? I note that this is a completely clean system.
FilterManager
EventID 3
PID 4 NT Kernel & System
FinalStatus 0x03a001c
GUI {F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}
\Device\HarddiskVolume58
Thanks for your advice.
All replies (6)
Wednesday, November 21, 2018 2:05 AM
Hi,
If your backups are working fine, you can safely ignore these Filter Manager events if they occur at the time a Backup runs. It won't hurt any operations
In addition, you could take a look at the article.
FilterManager Event ID 3 During Backups
http://www.mcbsys.com/blog/2012/12/filtermanager-event-id-3-during-backups/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Also some people manually disable VSS for that backup volume or disable Windows Search on the server stops this error.
Regards,
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, November 21, 2018 7:49 AM
Thanks for replying,
I've already searched the entire web and the only thing I found was a mistake to ignore or delete registers what caused the error in my case {F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}. This error occurs 4 times when I back up, I will have 1500 errors with this error for a year. I do not like. I do not even know why it's going to be, the system can be totally clean. I was looking at the link http://www.mcbsys.com/blog/2012/12/filtermanager-event-id-3-during-backups/, but in my case it does not cause Windows Search pid 904 but PID 4 NT Kernel & System. How can I make this mistake if it can not be solved?
Thank you
Tuesday, November 27, 2018 3:17 AM
Hi,
Based on my check, we could look at the details tab of the above event id, we could see what process is loggin it. For example:
[ ProcessID] 22164
[ ThreadID] 20880
Look at the process ID and thread ID to find out who reported the error.
Some service may stopped and disabled.
Regards,
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, November 28, 2018 7:51 AM
I do not understand this answer, I have already written exactly what it is about the error and what it causes. I can not send a picture because it still writes that I'm not verified and I do not know how to verify my account. Regards
Thursday, November 29, 2018 9:53 AM
Hi,
I mean, we can look at the information in detail option in the event log, and it will have a PID value.
As you said, the PID is 904. Then we could open task manager and check the Detailes/Services options.
See what the PID is pointing to name. It could be the place where the problem is.
Regards,
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Thursday, November 29, 2018 11:48 AM
- System
- Provider
[ Name] Microsoft-Windows-FilterManager
[ Guid] {F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}
EventID 3
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2018-11-29T11:43:53.615150000Z
EventRecordID 17776
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 10580
Channel System
Computer server
- Security
[ UserID] S-1-5-18
- EventData
FinalStatus 0xc03a001c
ExtraStringLength 25
ExtraString \Device\HarddiskVolume142
Regards,